- Windows Update certificates expire on May 17 and June 19, 2027, and affected PCs could lose access to the update service.
- Windows 11 25H2 and 26H2 require no action, while other supported versions must install the specified security updates before their applicable deadlines.
- Devices running Windows versions that have reached the end of servicing should upgrade to a supported release.
- Also, eligible Windows 10 devices enrolled in ESU can continue receiving covered security updates during their enrollment.
Microsoft warns that devices running unsupported Windows versions could lose access to Windows Update services after a set of certificates expires in May and June 2027.
The certificates help the operating system establish trusted connections to Windows Update. Because certificates expire, Microsoft must replace them to keep the update service working.
According to Microsoft, the certificates will expire on May 17, 2027, and June 19, 2027. Computers must install the required replacement certificates before the applicable deadline to keep receiving updates through Windows Update.
This certificate rotation is separate from the Secure Boot certificate updates that Microsoft has also been addressing. Windows Update certificates help maintain access to the update service, while Secure Boot certificates help verify trusted software during startup. The two issues serve different purposes and have different requirements.
Who needs to take action?
Regular users running supported versions of Windows don’t need to do anything beyond keeping their computers updated. Microsoft says it has already delivered replacement certificates through Windows updates, so devices running supported versions that have installed the required updates can continue receiving updates normally.
The required action depends on the Windows version.
- Windows 11, version 25H2 and later: No action is required.
- Windows 11, version 24H2, and Windows Server 2025: Install the September 2025 security update or a later update before June 19, 2027.
- Other supported versions of Windows 11 and Windows Server 2022: Install the July 2026 security update or a later update before June 19, 2027.
- Supported versions of Windows 10, including eligible devices enrolled in ESU: Install the July 2026 security update or a later update before June 19, 2027.
- Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or a later update before May 17, 2027.
Microsoft says computers running unsupported Windows versions will lose access to Windows Update services after the certificates expire. The company also warns that supported devices that haven’t installed the required updates could lose access to the service after the deadlines.
The certificate expiration dates don’t change the operating system support deadlines. Windows versions that have reached the end of servicing no longer receive regular security updates unless they qualify for an applicable extended support program. Installing the required certificate update doesn’t extend a Windows version’s support lifecycle. Users running unsupported versions should upgrade to a supported release, while eligible Windows 10 devices enrolled in the Extended Security Updates (ESU) program can continue receiving covered security updates during their enrollment.
The announcement also doesn’t specifically target computers running Windows 11 on unsupported hardware. The stated concern is the operating system version’s support status and whether the device has the required replacement certificates.
The change doesn’t apply to devices that receive updates through Windows Server Update Services (WSUS), which allows organizations to distribute updates across their networks.
Windows 11 26H2 is available as an upgrade
For users running an older version of Windows 11, upgrading to Windows 11 26H2 is one way to move to a newer supported release. Microsoft released the update on September 29, 2026, and is rolling it out gradually to eligible devices running versions 24H2 and 25H2.
To check for the upgrade, open Settings > Windows Update and select the “Check for updates” button. You can also enable the “Get the latest updates as soon as they’re available” option to receive eligible updates earlier. If version 26H2 is available for your computer, you can download and install it from Windows Update.
Upgrading to a supported Windows version is particularly important if your current edition has reached the end of servicing. For example, Windows 11 24H2 Home and Pro reached the end of support on October 13, 2026, while Enterprise and Education editions remain supported until October 12, 2027.
For Windows 10 users, standard support ended on October 14, 2025. Eligible devices enrolled in the Extended Security Updates (ESU) program can continue receiving covered security updates during their enrollment. Users not covered by ESU or another applicable support program should upgrade to a supported version of Windows to keep receiving security updates.
Users running Windows 11 24H2 Home or Pro should upgrade to a supported release to continue receiving regular security updates. However, the certificate rotation itself doesn’t require every user to upgrade to version 26H2. The immediate requirement for supported versions is to install the necessary updates before the applicable deadlines.
Microsoft recommends that administrators identify devices running unsupported versions of the operating system and plan upgrades before certificate expiration dates. Users should also keep supported systems up to date to avoid interruptions to Windows Update.
Are you concerned about Microsoft's Windows Update certificate deadline in 2027?
Voting closes: October 22, 2026 1:00 pm
How this affects you
If your computer runs a supported version of the operatin gsystem, keep it updated and install the required security updates before the applicable deadline. If your version has reached the end of servicing, check whether you’re covered by an extended support program or upgrade to a supported release. The certificate rotation doesn’t change existing Windows support deadlines, but missing the required certificates could prevent your device from accessing Windows Update in 2027.
Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech in 2010. With over 23 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS.
Certifications: Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+.
Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central.
You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at [email protected].
