Microsoft Warns Some PCs Could Lose Windows Update Access in 2027

Microsoft has issued a warning about a Windows maintenance job most people never have to think about: replacing the certificates that let a PC establish a trusted connection to Windows Update. In a nutshell, if an older system misses the replacements, it could eventually lose access to the update service.

Microsoft offered up some guidance on October 8. The certificates in question expire on May 17 and June 19, 2027. That gives users time to prepare, and Microsoft says most supported computers already receiving monthly updates require no special action.

The useful part of this announcement is knowing which situation your computer falls into. A working desktop and an up-to-date operating system are not necessarily the same thing.

What Microsoft Is Changing

In its Windows message center notice, Microsoft explains that replacement certificates are necessary to keep receiving updates after the applicable expiration date. Windows 11 version 25H2 and later require no action for this certificate change.

Windows 11 version 24H2 and Windows Server 2025 need the September 2025 security update or later. Other supported Windows 11 versions, Windows Server 2022, and supported Windows 10 versions need the July 2026 security update or later. Certain older enterprise and server editions have the earlier May deadline. This is a problem for me personally because I've been fighting a PC that won't update past 23H2. I'm pretty sure it's a VMware driver issue, but I haven't really bothered with it. I should probably get on that now, huh?.

For unsupported Windows versions, Microsoft says to upgrade to a supported release, whihc should be easy enough for most. This certificate change does not affect computers receiving updates through Windows Server Update Services (WSUS), which businesses and organizations use to manage Windows updates internally.

Check Your Version Before Chasing a Fix

Start by checking what is actually installed. Press Windows key + R, type winver, and press Enter. The window identifies your Windows version and build. You can also find the edition and version under Settings, System, About.

Then check Windows Update and review any installation failures. If this is a work or school computer, ask the administrator whether it receives updates through a managed service before changing anything yourself.

How to Tell If Your PC Has the Required Updates

Windows does not provide a simple pass-or-fail certificate test for this change. The practical way to check is to confirm your Windows version and whether the required security update, or a newer cumulative update, has been installed.

Open Settings, Windows Update, Update history, and look under Quality Updates for the installed updates. Compare the installation dates with Microsoft's requirements for your version of Windows.

Windows 11 version 25H2 and later require no action. Windows 11 version 24H2 and Windows Server 2025 need the September 2025 security update or later. Other supported Windows 11 versions, Windows Server 2022, and supported Windows 10 versions need the July 2026 security update or later.

If your system has the required update or a newer cumulative security update, it meets Microsoft's stated update requirement. If it has not received the required update, or Windows Update repeatedly fails, you cannot assume the certificate replacement is complete.

Remember that successfully checking for updates today does not prove your computer has the replacement certificates. The issue concerns continued access after the certificates expire in 2027.

What to Do If Your PC Is Missing Updates

If your computer does not have the required security update, open Settings, Windows Update, and select Check for updates. Install any available security updates and restart if prompted. Check Update history again afterward to confirm the installation succeeded.

If updates repeatedly fail, investigate the Windows Update error rather than assuming the certificates themselves are damaged. Microsoft's guidance is based on installing the appropriate updates, not running a separate certificate repair tool.

Pro TipThere is no reason to download a certificate repair utility from an advertisement or an unfamiliar support page. Follow Microsoft's guidance for your specific version. A warning about future update access is exactly the sort of thing that can make an unnecessary repair program capitalize on your worry. If you get super stuck you can check out somehting like < a href=”https://www.majorgeeks.com/files/details/windows_update_viewer.html“>Windows Update Viewer that can help you track down install errors or pop over to our Forums. Someone there will be happy to help.

Also keep two questions separate: whether your PC has the replacement certificates, and whether its Windows edition remains eligible for security updates. Meeting the certificate requirement does not extend an operating system's support period.

The Bottom Line

For a supported, regularly updated home PC, this should be routine maintenance handled through Windows.

For an older machine kept running with postponed updates, now is a good time to check its status. Finding a problem months before the deadline is considerably easier than discovering it after the update connection stops working.

Jim McMahon Jim McMahon, aka Corporal Punishment, is the founder of MajorGeeks.com. He has spent decades testing software, troubleshooting Windows, and helping users cut through the nonsense. He loves real freeware, hates bloatware, and runs on caffeine, sarcasm, and questionable choices.