< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 20 sources · 3 days · First seen · Last updated

Windows Update digital certificate rotation

Overview

Microsoft has announced a mandatory digital certificate rotation for Windows Update that will impact various versions of Windows and Windows Server in 2027. The rotation involves two primary expiration deadlines: May 17, 2027, and June 19, 2027.

Specific requirements vary by system. Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 must receive updates from July 2026 or later to meet the May deadline. Other versions, such as Windows Server 2022, must be updated by the June deadline. New details specify that Windows 11 (24H2) and Windows Server 2025 must have the September 2025 security update or newer by June 19, 2027, while other supported Windows 11 versions, Windows Server 2022, and supported Windows 10 versions must have the July 2026 update or newer by the same June deadline. Windows 11 25H2 and newer versions already meet these requirements.

While Microsoft began distributing replacement certificates via cumulative updates in September 2025, systems that are outdated or running unsupported versions may lose the ability to connect to update servers and download essential security fixes. While affected computers will continue to function and boot normally, they will become increasingly vulnerable to cyberattacks as new security flaws will no longer be patched.

For most users maintaining regular monthly updates, the transition is expected to be seamless. However, IT teams managing older installations or devices that have fallen behind on patching must take action to ensure service continuity. Devices receiving updates via Windows Server Update Services (WSUS) are reportedly not affected by this change.

Entities

Microsoft · Windows Update · Windows · Google · Android

Timeline

  1. [TECHNOLOGY] 14 sources
    Microsoft warns Windows PCs could lose security updates in 2027

    Microsoft warns that Windows devices missing new digital certificates could lose access to security updates in May and June 2027, potentially leaving systems vulnerable to cyberattacks.

  2. [TECHNOLOGY] 4 sources
    Microsoft Windows Update certificates to expire in 2027

    Microsoft announced that Windows Update certificates will expire in May and June 2027. Devices without recent security updates may lose access to future patches and functional updates.

  3. [TECHNOLOGY] 2 sources
    Android and Windows users face security update challenges

    Android users must manually monitor security patch dates to identify end-of-support, while Windows devices face potential update failures in 2027 due to expiring digital certificates.

Sources

blogspan.net · borncity.com · clubic.com · cybernoz.com · dailygeekshow.com · de.tenable.com · dellenny.com · guru3d.com · hothardware.com · ilsoftware.it · ithome.com · pc.watch.impress.co.jp · splashtop.com · tech.everyeye.it · techformator.pl · tecnoandroid.it · thehackernews.com · thurrott.com · tomsguide.fr · transactiondalgerie.com

This summary has been updated 3 times: see revision history