MICROSOFT has begun rotating the digital certificates used for Windows Update server connections, with expiry dates set for 17 May 2027 and 19 June 2027. The update server certificates are being refreshed as part of routine maintenance, and Microsoft says systems that receive regular monthly updates will have these new connection certificates deployed automatically, allowing devices to continue contacting Microsoft servers for patches without interruption.
The article notes that older devices or those that have paused updates for extended periods may miss the certificate rotation. Once the current certificates expire on the specified dates, such neglected systems could fail to establish secure connections to Microsoft servers, potentially preventing download of patches.
To complete the rotation, Microsoft released the necessary July 2026 update, and the guidance indicates that Windows 11 version 25H2 and later require no further action, while Windows 11 24H2 and Windows Server 2025 need updates from September 2025 or later. Other supported platforms are advised to install the July 2026 release or newer. The piece reiterates that the rotation is distinct from the UEFI CA 2023 certificate and that the new certificates have already been deployed to machines through routine updates.