Microsoft Warns Users That Windows Update May Stop Working in 2027 Due to Expiring Certificates

Key summary

Microsoft has issued a warning that users who have not updated their systems or have disabled Windows Update may be unable to download updates or security patches via Windows Update starting in 2027. This issue stems from digital certificates used to verify the authenticity of Windows Update servers, which are set to expire on May 17 and June 19, 2027. Devices that do not receive new certificates before these dates may fail to connect to Windows Update for updates. The expiration affects specific Windows versions including Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016, which have a deadline of May 17, 2027. Users on Windows 11 25H2 and later already possess the necessary certificates, while Windows 11 24H2 requires an update from September 2025, and some Windows 10 and Windows Server versions require updates from July 2026. Affected users can still download necessary patches from the Microsoft Update Catalog to install new certificates themselves, provided they are using a supported version of Windows. The issue does not prevent computers from booting or running programs normally; it only affects the ability to receive updates through Windows Update. This is distinct from previous concerns regarding Secure Boot, which relates to security checks during system boot rather than server connection verification.