Windows Update certificate rotation: Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and 2016

WindowsWindows Server

Who is affected

Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and Windows Server 2016 devices that get updates directly from Windows Update. Devices updated through WSUS are not affected by this change.

What to do

1. Install the July 2026 security update or later on these devices before May 17, 2027.
2. Find devices that have stopped patching: without the replacement certificates they lose access to Windows Update.

Source

Prepare for Windows Update certificate rotation in 2027“Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or later before May 17, 2027.”

Checked 9 Nov 2026 Link to this deadline