Microsoft is rotating the certificates used by Windows devices to verify the identity of Windows Update servers. The old certificates will expire on May 17, 2027, and June 19, 2027, respectively; at that time, devices that have not obtained the replacement certificates may no longer be able to receive updates via Windows Update. The new certificates are included in the regular monthly security updates, so most users who keep their systems up to date will not need to take any additional action.
Update requirements vary by system version. Windows 11 version 25H2 and later require no action; Windows 11 version 24H2 requires installation of security updates from September 2025 or later. Other supported versions of Windows 11 and Windows 10 must obtain updates from July 2026 or later by June 19, 2027.
Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 are subject to the earlier deadline of May 17, 2027. Microsoft states that devices running unsupported versions will lose access to Windows Update services and will not receive updates.
Some Windows 10 Home devices not enrolled in the Extended Security Updates program may not receive the July 2026 patch, so users should pay attention to update requirements. This assessment is based on the update requirements for each version. Users can check the update history according to their system version to confirm whether the required cumulative updates have been installed.