Do Son 
According to a recent Microsoft support bulletin, digital certificates for update server connections expire soon. Specifically, they expire on May 17 and June 19, 2027. Currently, Microsoft is actively rotating these critical connection certificates. As detailed in the Microsoft admin center, systems maintaining regular updates will rotate these certificates automatically. Consequently, these machines will continue connecting seamlessly to Microsoft servers for future updates.
Extended Delays Cause Update Failures
This rotation specifically targets certificates managing communication between devices and update servers. This adjustment is not the UEFI CA 2023 certificate. Microsoft has already deployed these new connection certificates to all devices through routine monthly updates. Therefore, systems operating with standard update schedules remain entirely unaffected. These specific machines have likely completed the necessary certificate rotation already.
Conversely, devices halting updates for extended periods cannot receive the rotated certificates. Once the current certificates expire, these neglected devices will fail to establish secure connections with Microsoft servers. At this point, the system can no longer download any patches from Microsoft. Furthermore, users manually triggering the update check may encounter error messages. They will face these roadblocks unless they manually download the necessary updates to force the certificate rotation.
The Crucial July 2026 Update Requirement
Microsoft successfully distributed the new digital certificates within the updates released in July 2026. Consequently, users must install at least this specific July patch. By doing so, the system effectively completes the certificate rotation. Even if users temporarily pause subsequent updates, they will not face download failures after the expiration deadline.
Windows 11 version 25H2 and subsequent iterations require no additional intervention. Meanwhile, Windows 11 24H2 and Windows Server 2025 require updates released in September 2025 or later. Other supported platforms require the July 2026 release or newer. These older platforms include Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and Windows 10 LTSC 2019.
Support Our Threat Intelligence
Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
