Science & Tech · Big Tech & Internet · 1 hr ago
Windows devices need certificate updates before May and June 2027 deadlines
Microsoft is replacing digital certificates that Windows uses to verify its update servers.
The existing certificates expire on May 17 or June 19, 2027, depending on the Windows version.
Devices without replacements could lose access to Windows Update, including security fixes.
Most people using a supported Windows version and installing monthly updates should get the replacements automatically.
Some devices need a security update first, and IT administrators may need to act for certain versions.
Microsoft advises people using unsupported Windows versions to upgrade; Windows 11 version 25H2 and later need no action.
Devices that miss the deadline can regain access by installing the required update, while devices updated through WSUS are excluded from this change.
Microsoft says Windows devices need replacement certificates before the certificates used to verify Windows Update servers expire in May and June 2027.
Without the replacements, devices will lose access to Windows Update, including security fixes delivered through the service.
Most supported Windows devices that receive monthly updates should get the certificates automatically.
Some older or out-of-date versions need security updates installed by the relevant deadlines, while unsupported versions should be upgraded.
Devices receiving updates through Windows Server Update Services are excluded from the change.
- Who
- Windows users and IT administrators; some administrators need to update devices or plan upgrades.
- What
- Microsoft is replacing certificates used to verify Windows Update servers.
- When
- The old certificates expire on May 17 or June 19, 2027, depending on the Windows version.
- Where
- On Windows devices that use Windows Update.
- Why
- The certificates are expiring, and devices without replacements will lose access to Windows Update and its security fixes.
This story does not have two clearly opposing sides.
However, the key to getting updates from Windows Update beyond 2027 is to keep your devices up to date today.
Security updates from this month or later include the replacement certificates for several Windows versions.
Certificates expire for some Windows versions, including Windows Server 2016 and 2019.
Certificates expire for other versions, including newer supported Windows 10 versions.
- Certificate expiry dates
- May 17 or June 19, 2027
- Windows 11 25H2 and later
- No action required
- Windows 11 24H2
- September 2025 security update or later required
- Some Windows versions
- July 2026 security update or later required
- WSUS devices
- Excluded from the certificate change











