Outdated Windows PCs Could Lose Access to Windows Update in 2027
Microsoft is preparing an important behind-the-scenes change that could affect millions of Windows PCs. The company is replacing the security certificates that Windows devices use to confirm they are connecting to legitimate Windows Update servers.
These certificates are essential because they help protect users from fake update servers and ensure that security patches, bug fixes, and feature updates come directly from Microsoft. The current certificates are set to expire on May 17 and June 19, 2027. If a PC does not receive the replacement certificates before the deadline, it may lose access to Windows Update entirely.
That means no new security patches, no system fixes, and no feature updates.
For most users, there is no reason to panic. The new certificates are being delivered through regular monthly Windows updates. If your PC is up to date, it should already receive everything it needs automatically. The real risk is for computers that have not been updated in a long time or are running unsupported versions of Windows.
Which Windows versions need an update?
Microsoft says the required update depends on the version of Windows installed on the device.
Windows 11 version 25H2 and newer do not require any action.
Windows 11 version 24H2 needs the September 2025 security update or any later update. Microsoft is also moving many consumer PCs from Windows 11 24H2 to Windows 11 25H2 automatically.
Other supported versions of Windows 11 and Windows 10 need the July 2026 security update or a newer cumulative update before June 19, 2027.
For Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016, the deadline arrives earlier, on May 17, 2027.
Devices running unsupported versions of Windows are in the most difficult position. If they do not qualify for updates, they will eventually lose Windows Update access. Microsoft’s recommendation for those systems is to upgrade to a supported version of Windows.
Windows 10 users should pay close attention
The biggest concern is for Windows 10 home users who did not join the Extended Security Updates program. Standard support for Windows 10 ended in October 2025, meaning PCs outside the ESU program stopped receiving regular patches after that point.
Because of that, a Windows 10 PC without ESU would not receive the July 2026 update that includes the replacement certificates. By June 19, 2027, Windows Update may stop working on that machine altogether.
Users can still enroll eligible Windows 10 PCs in Extended Security Updates until October 2027. Once enrolled, the PC can receive the necessary cumulative updates, including the new certificates required to keep Windows Update functioning.
How to check your Windows version
To see which version of Windows your PC is running, type winver into the taskbar search box and open the result. A small window will show your Windows version and build number.
You can also check your update history.
On Windows 11, go to Settings, then Windows Update, and open Update history.
On Windows 10, go to Settings, then Update & Security, then Windows Update, and check the update history from there.
If your PC has a cumulative update from July 2026 or later, it should be covered as long as it is running a supported version of Windows. If that update is missing, run a manual check for updates through Windows Update.
If Windows Update does not offer the required package automatically, Microsoft says users may be able to download the correct update manually from the Microsoft Update Catalog.
Business systems managed through WSUS are not affected in the same way, since those devices receive updates through enterprise update management.
Why this matters
This change is not just a routine technical adjustment. Windows Update is one of the most important security tools built into Windows. Without it, a PC becomes increasingly vulnerable to malware, ransomware, browser attacks, driver issues, and software compatibility problems.
If your Windows device is updated regularly, you likely do not need to take any extra steps. But if you have an older PC, a rarely used laptop, or a Windows 10 machine that has not received updates in months, now is the time to check its status.
Keeping Windows updated before the 2027 certificate deadlines will ensure your device continues to receive security patches and remains connected to Microsoft’s official update system.
