Windows PCs with outdated certificates will stop receiving security updates, here’s what to do
AI-summarised brief · reviewed before publication
Microsoft has warned that PCs running older Windows versions with certificates set to expire will lose access to Windows Update unless they install the required security updates before the expiration dates. The notice applies to all client PCs, workstations, and servers, except enterprise devices managed via Windows Server Update Services. Windows 11 25H2 and later already contain the latest certificates, while Windows 11 24H2, Windows Server 2025, Windows Server 2022, and supported Windows 10 versions must receive the September 2025 or July 2026 updates to stay current. LTSB/LTSC Windows 10 Enterprise 2019, Windows Server 2019, and Windows Server 2016 have a May 17 2027 cutoff. Unsupported older Windows releases will also lose update access, prompting Microsoft to recommend upgrading.
💡 Why It Matters
- · The deadline forces IT teams to act quickly or risk losing critical security patches, exposing networks to vulnerabilities.
- · This shift underscores Microsoft’s tightening of update compliance and the urgency for organizations to modernize legacy systems.