Microsoft says unsupported Windows devices will lose security updates in 2027

Older Windows machines will stop getting updates after certificate rotation unless they are moved to a supported release.

Microsoft says older Windows devices will stop getting security updates once the company rotates Windows Update certificates in 2027, so admins need to move unsupported systems to a supported release before then. The first certificate set expires on May 17, 2027 and another on June 19, 2027, and Microsoft says affected machines will lose access to Windows Update services and stop receiving updates. For supported systems, Microsoft says replacement certificates are already in place, so up-to-date devices do not need extra action. The company also listed version-specific deadlines, including a September 2025 update requirement for Windows 11 24H2 and Windows Server 2025, and a July 2026 update requirement for several other supported Windows releases. It said the guidance does not apply to devices updated through WSUS.