Windows Update certificate rotation: Windows 11, Windows Server 2022/2025 and other in-support Windows 10

WindowsWindows Server

Who is affected

In-support Windows 11, Windows Server 2022 and 2025, and in-support Windows 10 devices that are behind on monthly updates. Windows 11, version 25H2 and later need no action.

What to do

1. Windows 11, version 24H2 and Windows Server 2025: install the September 2025 security update or later.
2. Other in-support Windows 11, Windows Server 2022 and Windows 10: install the July 2026 security update or later.
3. Upgrade any out-of-support Windows version, which will lose access to Windows Update.

Source

Prepare for Windows Update certificate rotation in 2027“Certificates used to establish trusted connections to Windows Update will expire on May 17, 2027 and June 19, 2027. Devices must contain the replacement certificates to continue receiving updates after the applicable expiration date.”

Checked 9 Nov 2026 Link to this deadline