Windows machines that are not current with updates will face changes in access to Windows Update due to two critical certificate expirations on May 17, 2027, and June 19, 2027. Supported versions must install specific security updates before these dates to maintain access.
- Windows 11, version 25H2 and later: No action required.
- Windows 11, version 24H2 and Windows Server 2025: Must install the September 2025 Windows security update or later, before June 19, 2027.
- Other in-support Windows 11 versions and Windows Server 2022: Must install the July 2026 Windows security update or later, before June 19, 2027.
- In-support Windows 10 versions: Must install the July 2026 Windows security update or later, before June 19, 2027.
- Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Must install the July 2026 Windows security update or later, before May 17, 2027.
- Any other Windows version: Upgrade to a supported release to maintain access.
Devices that are up to date will continue receiving updates without interruption, while those that are behind will lose access to Windows Update services after the expiration dates. Out-of-support versions will lose access entirely. The notice regarding the certificate expiration was posted on October 8, 2026, and reiterated on October 10, 2026.