Microsoft has announced a critical update regarding the future of security for devices running unsupported versions of Windows. As part of its ongoing commitment to cybersecurity, the tech giant revealed that these devices will cease to receive security updates following the upcoming Windows Update certificate rotation scheduled for May and June 2027.
Essential Upgrade Guidance
To maintain the integrity of their systems, both administrators and users are urged to transition to a supported version of Windows prior to the expiration of the Windows Update certificates. Microsoft emphasized the importance of this upgrade, stating, “As a standard security practice, these certificates have an expiration date. This means that they eventually need to be rotated (that is, replaced by new certificates).” The specific dates for the expiration of these certificates are May 17, 2027, and June 19, 2027.
Devices operating on unsupported versions of Windows will lose access to Windows Update services, resulting in a halt to all updates. To mitigate this risk, Microsoft recommends upgrading to a supported version of either Windows client or server.
In a recent update from the Microsoft 365 Message Center, the company confirmed that replacement certificates have already been issued to systems running supported versions of Windows, requiring no further action for those systems that are current.
For clarity, Microsoft provided detailed guidance on the necessary actions based on the Windows version:
- Windows 11, version 25H2 and later: No action is required.
- Windows 11, version 24H2 and Windows Server 2025: Install the September 2025 security update or later before June 19, 2027.
- Other supported versions of Windows 11, Windows Server 2022, and Windows 10: Install the July 2026 security update or later before June 19, 2027.
- Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or later before May 17, 2027.
- Other Windows versions: Upgrade to a supported version of Windows client or Windows Server.
IT administrators are encouraged to assess their networks for devices running older or unsupported Windows versions ahead of the 2027 certificate rotation. They should also ensure that monthly Windows updates are deployed across all supported devices to maintain their security posture. Furthermore, creating a comprehensive upgrade plan for unsupported devices is essential before the impending deadlines in May and June 2027.
Microsoft reassured users, “And if you do need to act on older device populations, there’s still time! Review, update, and plan upgrades for unsupported versions before the May 2027 or June 2027 certificate expiration dates.”
It is important to note that this directive does not extend to devices receiving updates through Windows Server Update Services (WSUS), which facilitates the downloading and distribution of updates across enterprise networks.
In related news, Microsoft recently launched Windows 11, version 26H2, also known as the Windows 11 2026 Update. This update is being rolled out as a small enablement package for eligible Windows 11 24H2 and 25H2 systems, marking a significant step in the ongoing evolution of the Windows operating system.
