[REVISION HISTORY]

Windows Update digital certificate rotation

Updated 3 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-12 06:28 UTC → 2026-10-13 18:43 UTC · added ~~removed~~

Microsoft has announced a mandatory digital certificate rotation for Windows Update that will impact various versions of Windows and Windows Server in 2027. The rotation involves two primary expiration deadlines: May 17, 2027, and June 19, 2027. Specific requirements vary by system. Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 must receive updates from July 2026 or later to meet the May deadline. Other versions, such as Windows Server 2022, must be updated by the June deadline. New details specify that Windows 11 (24H2) and Windows Server 2025 must have the September 2025 security update or newer by June 19, 2027, while other supported Windows 11 versions, Windows Server 2022, and supported Windows 10 versions must have the July 2026 update or newer by the same June deadline. Windows 11 25H2 and newer versions already meet these requirements. While Microsoft began distributing replacement certificates via cumulative updates in September 2025, systems that are outdated or running unsupported versions may lose the ability to connect to update servers and download essential security fixes. While affected computers will continue to function and boot normally, they will become increasingly vulnerable to cyberattacks as new security flaws will no longer be patched. For most users maintaining regular monthly updates, the transition is expected to be seamless. However, IT teams managing older installations or devices that have fallen behind on patching must take action to ensure service continuity. Devices receiving updates via Windows Server Update Services (WSUS) are reportedly not affected by this change.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.