IT News on October 12th: Microsoft warns that some outdated or unsupported Windows devices may lose access to Windows Update update services in 2027.
Microsoft announced that a set of certificates used to verify trusted connections between devices and the Windows Update server will expire on May 17, 2027, and June 19, 2027. Relevant devices need to install updates containing new certificates in advance, or upgrade to the supported Windows version.
On October 8th local time, Microsoft stated on its official blog at Windows IT Pro that Windows Update uses a certificate-based trust mechanism to ensure that devices are connecting to trusted update servers. Since certificates have an expiration date, they need to be replaced before they expire. Microsoft has provided new certificates for most devices through regular monthly updates, but some older systems or those that have not been updated in time still require administrators to take action.
According to the requirements announced by Microsoft, devices running Windows 11 25H2 and subsequent versions do not require any additional actions. Windows 11 24H2 and Windows Server 2025 need to install the Windows security update released in September 2025 or later by June 19, 2027; other still-supported Windows 11 versions, Windows Server 2022, as well as the still-supported Windows 10 versions, need to install the security update released in July 2026 or later by the same deadline.

For Windows 10, Enterprise 2019, LTSC, Windows Server 2019, and Windows Server 2016, Microsoft requires the installation of security updates released in July 2026 or later by May 17, 2027. For other Windows versions that have ceased to be supported, upgrades to still-supported Windows client or server versions are necessary.
Microsoft indicates that devices running supported versions and having the required updates installed can continue to receive updates normally during the certificate rotation period. If supported devices are not updated in a timely manner, they will not be able to access the Windows Update service after the corresponding certificates expire. For devices that are still using unsupported systems, Microsoft states that these devices will lose access to the Windows Update service and will not be able to receive updates through this service.
IT reminds that for devices that require manual processing, administrators can download and install the corresponding updates through Microsoft Update Catalog, or they can use existing device management tools for unified deployment. Microsoft specifically emphasizes that devices that receive updates using Windows Server Update Services ( WSUS ) are not affected by this adjustment.
Microsoft recommends that IT administrators of enterprises proactively check devices running older or unsupported Windows systems to ensure that supported devices receive monthly updates in a timely manner. Additionally, it is advised to develop upgrade plans before the relevant deadlines in May and June 2027 to minimize disruption due to updates and reduce security risks.












