Microsoft is rotating the security certificates required for Windows PCs to communicate with Windows Update servers. Devices that fail to receive these updates will lose access to the service and stop receiving future patches.
The transition process began on October 8. Current certificates are scheduled to expire on May 17 and June 19, 2027. Most users will receive the necessary replacements automatically through standard monthly security updates.
Specific requirements apply to different versions of the operating system. Windows 11 24H2 requires the September 2025 security update or newer. Other supported versions of Windows 11 and Windows 10 must install the July 2026 update or later before the June 19 deadline.
Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 face the earlier deadline of May 17. Microsoft advises users on unsupported versions to upgrade their systems to maintain service access.
For home users, this primarily affects Windows 10 machines that did not enroll in Extended Security Updates after the OS reached its end of life in October 2025. Enrolling in ESU coverage, which extends until October 12, 2027, should provide the necessary certificates.
