Microsoft Warns Unsupported Windows Devices Will Lose Windows Update Access in 2027

Microsoft has warned that devices running unsupported versions of Windows will stop receiving security updates after Windows Update certificates are rotated in 2027.

To keep receiving updates, administrators and users must upgrade to a supported version of Windows before the relevant Windows Update certificates expire on May 17, 2027, and June 19, 2027.

“As a standard security practice, these certificates have an expiration date. This means that the certificates will eventually need to be rotated (that is, replaced with new certificates). These sets of certificates will expire on May 17, 2027 and June 19, 2027,” Microsoft said.

Microsoft added that devices running unsupported Windows versions “will no longer be able to access the Windows Update service and, as a result, will not receive updates.” The company advised users to upgrade to a supported Windows client or Windows Server version.

Another Microsoft 365 Message Center update notes that systems running supported Windows versions have already received an alternate certificate. No additional action is required for devices that are fully up to date.

Windows versions affected by the certificate rotation

Microsoft shared the following guidance for each Windows version:

• Windows 11 version 25H2 and later: No action is required.
• Windows 11 version 24H2 and Windows Server 2025: Install security updates released in September 2025 or later by June 19, 2027.
• Other supported versions of Windows 11, Windows Server 2022, and Windows 10: Install security updates released in July 2026 or later by June 19, 2027.
• Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install security updates released from July 2026 onward by May 17, 2027.
• Other Windows versions: Upgrade to a supported version of Windows Client or Windows Server.

Microsoft urges administrators to prepare before 2027

Microsoft advised IT administrators to identify all devices running older or unsupported Windows versions before the Windows Update certificate rotation begins in 2027.

Organizations should also deploy monthly Windows updates to supported devices, keep systems current, and create an upgrade plan for unsupported devices before the May and June 2027 deadlines.

“And if you need to address an older fleet of devices, there’s still time. Check for unsupported versions, update, and plan an upgrade before your certificates expire in May 2027 or June 2027,” Microsoft said.

WSUS-managed devices are not affected

The certificate rotation does not apply to devices that receive updates through Windows Server Update Services (WSUS), which downloads and distributes updates across corporate networks.

Windows 11 version 26H2 rollout

Last month, Microsoft released Windows 11 version 26H2, also known as the Windows 11 2026 Update. It is generally available for targeted Windows 11 24H2 and 25H2 systems as small enablement packages rather than a complete operating system replacement. Microsoft is rolling out the update in stages over the next few months.

Join Mikko Hypponen and security leaders from the NFL, Chanel, and Atlassian for a 2-hour digital summit about what will change with AI speed attacks, what defenders should stop doing, and how to verify, decide, fix, and revalidate at machine speed.

Please reserve your seat