Microsoft sets out the steps needed before Windows Update certificates expire
Source announcement: 8 October 2026
Change dates: Certificates expire on 17 May and 19 June 2027
Microsoft has explained how it will replace certificates that Windows Update uses to recognise trusted update services. Certificates are digital proofs of identity. The current set expires in May and June 2027, so this is a preparation notice, not a report that Windows Update has stopped working today.
Most people with a supported, regularly updated Windows computer should receive the replacement through ordinary monthly updates. Older or neglected systems need closer attention. Microsoft says a supported device that lacks the required update could lose access to Windows Update after the relevant 2027 expiry date. That would make it harder to receive future security fixes, increasing risk over time.
The instructions vary by Windows version. Windows 11 version 25H2 and later needs no special action. Windows 11 24H2 and Windows Server 2025 need the September 2025 security update or later before 19 June 2027. Other supported Windows 11 releases and Windows Server 2022 need the July 2026 security update or later. Certain older long-term Windows and Server releases have a 17 May 2027 deadline. Microsoft says devices using Windows Server Update Services are outside this particular notice.
For households, the practical step is to keep a supported version of Windows updated. Businesses should inventory older machines, compare each version with Microsoft’s table and plan upgrades for unsupported systems. This is a future loss-of-updates risk for specific devices, not evidence of an attack on Windows users.
Comments