When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Microsoft’s Windows Update certificates expire in May and June 2027. Fortunately, replacement certificates are available.
This year, Windows users had to deal with Microsoft’s shaky rollout of Secure Boot certificate updates, which were needed to keep PCs protected against rootkits and other threats that could compromise a system at startup. Now, users are facing a different kind of certificate update, and it’s slated to arrive less than a year from now.
The next big certificate update concerns Windows Update. Starting May 2027, current Windows Update certificates will expire, which Microsoft explains on this support page:
Prepare for Windows Update certificate rotation in 2027
Certificates used to establish trusted connections to Windows Update will expire on May 17, 2027 and June 19, 2027. Devices must contain the replacement certificates to continue receiving updates after the applicable expiration date.
In short, if your PC doesn’t get updated Windows Update certificates, you’ll lose access to Windows updates.
Advertisement
Microsoft is rolling out the new certificates via an update, and the good news is that all actively supported versions of Windows 11 will receive said updates. That means if you’re running Windows 11 26H2 or 25H2 and you stay on top of Windows updates, you have nothing to worry about—Microsoft already distributed the updated Windows Update certificates as part of the security updates released in July 2026.
Advertisement
What happens if your Windows PC does not get updated certificates?
According to Microsoft:
Devices without the replacement certificates will lose access to Windows Update after the applicable expiration date. This change does not apply to devices receiving updates from Windows Server Update Services (WSUS).
However, if you’re still on an older, unsupported version of Windows 11, you might run into trouble. Your Windows PC will no longer be able to download updates from Microsoft’s servers without the proper certificates.
To ensure that doesn’t happen to you, here are the relevant updates you should install depending on your version of Windows:
Windows 11, version 24H2 and Windows Server 2025: Install the September 2025 security update or later before June 19, 2027.
Advertisement
Other in-support versions of Windows 11, Windows Server 2022, and in-support versions of Windows 10: Install the July 2026 security update or later before June 19, 2027.
Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or later before May 17, 2027.
Advertisement
Other Windows versions: Upgrade to a supported version of Windows client or Windows Server.
New research involving scientists from Anthropic and ETH Zurich suggests that modern artificial intelligence systems could identify the real-world identities behind supposedly anonymous internet accounts. […]
The European Parliament has approved an urgent procedure to fast-track legislation that would revive the EU’s expired “Chat Control 1.0” rules. This development sets up […]
By Digiday Awards • June 30, 2026 • This year’s Digiday Content Marketing Awards winners demonstrate how brands are shifting toward more authentic, community-driven approaches […]
