Microsoft Warns: Update Certificates or Risk Losing Windows Updates in 2027

Microsoft has warned IT administrators that some Windows devices could lose access to Windows Update services in 2027 unless they receive updated security certificates before two important deadlines.

The company outlined the upcoming changes in an official Windows IT Pro blog post, explaining that certificates used to establish trusted connections with Windows Update will expire on May 17 and June 19, 2027.

Windows Update relies on certificate-based authentication to verify connections to Microsoft’s update servers. Once the existing certificates expire, devices without the necessary replacements could lose access to all types of Windows updates.

Microsoft is distributing the new certificates through regular security updates, meaning most organizations that keep their devices updated will not need to take additional action. However, older systems and devices running outdated Windows versions may require manual intervention.

Which Windows versions need updates before 2027?

Microsoft has published different requirements depending on the Windows version, with deadlines falling in May or June 2027.

• Windows 11 25H2 and later: No action required, as these versions already include the necessary certificates.
• Windows 11 24H2 and Windows Server 2025: Install the September 2025 security update or later before June 19, 2027.
• Other supported Windows 11 versions and Windows Server 2022: Install the July 2026 security update or later before June 19, 2027.
• Supported Windows 10 versions: Install the July 2026 security update or later before June 19, 2027.
• Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or later before May 17, 2027.
• Unsupported Windows versions: Upgrade to a supported Windows release to maintain access to Windows Update services.

The company emphasizes that devices running supported Windows versions with recent monthly security updates should continue receiving updates without interruption.

However, organizations that delay installing the required updates risk losing access to Microsoft’s update infrastructure once the certificates expire.

Microsoft urges IT administrators to prepare now

Microsoft recommends that IT administrators review their device inventories and identify systems running older or unsupported Windows versions.

Organizations should ensure that supported devices receive the necessary monthly security updates and develop upgrade plans for systems that no longer receive official support.

Administrators can use their existing device management tools to distribute the required updates. Microsoft also recommends the Microsoft Update Catalog for downloading and manually installing updates on affected devices.

Microsoft also clarified that the certificate rotation requirements do not apply to devices receiving updates through Windows Server Update Services (WSUS).

The company is encouraging organizations to complete their preparations well before the deadlines to avoid disruptions and reduce security and compliance risks.

The warning comes as Microsoft prepares several other changes affecting business users and IT administrators. The company is also retiring Microsoft 365 Targeted Release in 2027 and removing legacy WAM sign-in support in Microsoft Edge 157.

Meanwhile, Microsoft has also introduced remote PC connections in the Windows App, expanding its remote access capabilities for Windows users.