Microsoft warns Windows devices face update cutoff by 2027

Microsoft is warning businesses and home users that millions of Windows devices face a complete cutoff from Windows Update unless they install required security patches before May 17 and June 19, 2027. Help Net Security reported that the impending disruption stems from expiring digital certificates that Windows PCs use to verify genuine update servers.

While routine monthly updates automatically deliver the replacement certificates to most active systems, unpatched machines and unsupported operating system versions will lose network access entirely. TechPowerUp noted that the rotation was announced on October 8, setting firm expiration dates of May 17, 2027, for specific enterprise and server builds, and June 19, 2027, for the remaining supported ecosystem.

Certificate Expiration Dates and Affected Software Versions

Notebookcheck outlined how the replacement schedule splits across different Windows editions, creating distinct compliance deadlines for administrators and home users. Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 face the earlier expiration date of May 17, 2027.

Most other supported releases, including Windows 10 and Windows Server 2022, must install a cumulative update from July 2026 or later before the June 19, 2027 deadline. MakeUseOf added that Windows 11 version 24H2 requires the September 2025 security update or a later release, while Windows 11 version 25H2 and newer editions require no additional manual intervention.

Windows 10 Exposure and Extended Security Upgrades

For consumer users, the cutoff heavily impacts aging Windows 10 installations that reached their initial end of life in October 2025. Notebookcheck pointed out that machines never enrolled in Extended Security Updates have not received patches since October 2025, meaning they missed the critical July 2026 certificate package.

Microsoft permits home and business users to enroll in Extended Security Updates until October 2027. Enrolling in the program and installing the offered cumulative updates before June 2027 provides the necessary cryptographic keys to maintain server connectivity.

Manual Verification and Administrative Remediation Steps

Systems that miss the automatic certificate rotation can still restore functionality manually after the deadline. MakeUseOf explained that administrators and users can download required packages directly from the Microsoft Update Catalog or deploy them through standard management infrastructure.

MakeUseOf also outlined verification steps for users uncertain of their system status:

• Open the Start menu and select Settings.
• Navigate to Update & Security or Windows Update depending on the operating system version.
• Click Check for updates to scan for missing packages.
• Type winver into the taskbar search to confirm the exact installed build.

TechPowerUp reported that devices managed through Windows Server Update Services are excluded from this specific certificate constraint. Microsoft’s Andrew Brown emphasized the primary preventative measure in the initial documentation, stating, However, the key to getting updates from Windows Update beyond 2027 is to keep your devices up to date today, as quoted by Help Net Security.