IT SBIT Services
Schneeberger
DEEN
Known update issues

Windows Update: certificates expire May/June 2027, devices need replacement certificates

UpcomingDated change

← All entries

Summary

Certificates used to establish trusted connections to Windows Update expire on May 17, 2027 and June 19, 2027. Devices without the replacement certificates will lose access to Windows Update. Most up-to-date, supported devices need no action. Devices receiving updates from WSUS (Windows Server Update Services) are not affected.

What changes?

After the expiration dates, devices without the replacement certificates can no longer connect to Windows Update and receive no updates of any type. Devices on supported, up-to-date Windows versions continue without interruption.

Affected

  • Windows 11, version 25H2 and later: no action required
  • Windows 11, version 24H2 and Windows Server 2025: need the September 2025 security update or later before June 19, 2027
  • Other in-support Windows 11 versions, Windows Server 2022 and in-support Windows 10 versions: need the July 2026 security update or later before June 19, 2027
  • Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and Windows Server 2016: need the July 2026 security update or later before May 17, 2027
  • Other (unsupported) Windows versions: must be upgraded to a supported version; they will lose access to Windows Update

Preparation and temporary exceptions

  1. Identify devices running older, out-of-date or unsupported Windows versions.
  2. Install the required security update (see Affected) via your regular management tools, or download it from the Microsoft Update Catalog.
  3. Plan upgrades for unsupported devices before May and June 2027.

Check and complete

Not a defect: the replacement certificates are delivered with the monthly security updates listed above. Verify that each device has at least the required update installed.

Recommendation

Keep all supported devices current with monthly updates. Check your inventory now for 2016/2019 servers, LTSC devices and unsupported Windows versions, and install the July 2026 update or later well before May 17, 2027. Plan the replacement or upgrade of unsupported systems.

Timeline

Sources

Compiled from the sources listed and translated with AI (Claude); status and dates come from the vendor. The vendor’s statements are authoritative. Updated 1 Nov 2026, 15:48.

Where the information comes from

We continuously read the vendors’ official sources, community reports and trade media and summarise them in our own words, with a link to the source:

  • Microsoft: Windows release health (Windows 10/11, Server 2016 to 2025), Windows message center, known issues of Microsoft 365 Apps (Outlook, Excel, Word, PowerPoint), Edge, Intune, Autopilot, Windows 365 and Entra Connect, Microsoft KB articles with timelines, Exchange and Windows IT Pro blogs, optionally Microsoft 365 service health and message center
  • other vendors: Veeam KB, Citrix (known issues), Ubuntu and Debian (regressions), Broadcom (VMware), Fortinet, Cisco, Mozilla, Let’s Encrypt
  • community (title, short excerpt and link only, without the names of the authors): Microsoft Q&A, Microsoft Tech Community (discussions), Veeam R&D Forums, Eleven Forum
  • targeted web research with AI (Claude), e.g. on the updates of the month – this also finds discussions on Reddit and in forums; such entries are labelled as community reports until the vendor confirms them
  • early warning from trade media (title and link only): Born’s Tech and Windows World, BleepingComputer, AskWoody, Windows Latest, Windows Central, gHacks, The Windows Club, Deskmodder, Dr. Windows, WindowsArea, Frankys Web, heise online

Summary and translation with AI (Claude by Anthropic) – without any data of visitors.

Affected? We can help.

We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.

Get in touchRSS feed