Microsoft warns Windows PCs may lose update access in 2027 due to certificate expiration
Devices lacking specific certificate rotations before mid-2027 could lose access to critical security patches and Windows Update services.
Key points
- Microsoft advises updating Windows devices before digital certificates expire in May and June 2027.
- Certificate expiration dates are May 17 and June 19, depending on the specific Windows version installed.
- Devices missing replacement certificates will lose access to Windows Update and subsequent security fixes.
Microsoft is urging users and businesses to update their Windows devices before specific digital certificates expire in 2027. According to Help Net Security, these certificates are essential for verifying the authenticity of Windows Update servers. If devices do not receive replacement certificates through a process known as certificate rotation, they will lose access to the update service entirely.
The expiration dates for these certificates are fixed at May 17 and June 19, 2027. The specific date applies depending on the version of Windows running on the device. Microsoft is currently distributing the necessary replacement certificates to prevent service interruption. This ongoing process is designed to ensure continuous connectivity to the update infrastructure.
Context and Background
Digital certificates serve as a verification mechanism for communication between Windows devices and Microsoft's update servers. Without valid certificates, the operating system cannot confirm that the source of the updates is legitimate. Help Net Security reports that Microsoft is advising proactive updates to ensure these rotations occur successfully. The company describes this distribution method as certificate rotation, a standard procedure for maintaining secure update channels over time.
Failure to complete this rotation before the stated deadlines means the device will no longer trust the update servers. Consequently, the operating system will block connections to Windows Update. This blockage prevents the delivery of any new software, including critical security patches that address vulnerabilities. The loss of update access leaves the system exposed to emerging threats without the ability to install defensive measures.
Who Is Affected
This issue impacts all Windows PCs that have not yet received the new certificates through the rotation process. Both individual users and business organizations are advised to check their device status. Help Net Security notes that Microsoft is directing this advice broadly to users and businesses alike. The risk applies to any device that fails to complete the certificate update before the 2027 expiration windows close.
Devices that are offline or disconnected from the internet during the distribution period may miss the automatic updates. Those systems are at higher risk of losing access to the update infrastructure. Organizations with large fleets of Windows machines should verify that their deployment methods allow for the receipt of these specific certificate updates. The guidance implies that passive waiting may not be sufficient for all environments.
What should you do?
Administrators and users should verify that their Windows devices are receiving the latest certificate updates. Checking Windows Update settings and ensuring devices connect to the internet regularly can facilitate the automatic rotation. Monitoring official Microsoft channels for further instructions on the certificate distribution process is recommended. Organizations should audit their device management systems to confirm that all endpoints are successfully completing the rotation before the 2027 deadlines.
What to do and how to stay safe: Microsoft
- Verify that Windows Update is functioning correctly on all managed devices to ensure receipt of certificate rotations.
- Ensure devices maintain regular internet connectivity to allow automatic updates and certificate exchanges to occur.
- Monitor official vendor communications for specific instructions regarding the certificate rotation process and deadlines.
- Audit device management logs to confirm that all endpoints have successfully received the necessary certificate updates.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When do the Windows Update certificates expire?
The certificates expire on May 17 and June 19, 2027, depending on the specific Windows version installed on the device.
What happens if a device misses the certificate update?
Devices without replacement certificates will lose access to Windows Update, including the delivery of security fixes and other patches.
How is Microsoft distributing the new certificates?
Microsoft is distributing the replacement certificates through a process known as certificate rotation, which updates the verification credentials.
