iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows devices that do not receive the replacement certificates described in Microsoft’s October 8, 2026 Windows Message Center notice will lose access to Windows Update after a deadline that depends on the Windows version. For most in-support versions the deadline is June 19, 2027. For Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and Windows Server 2016 it is May 17, 2027. Devices that get updates from Windows Server Update Services (WSUS) are outside this change, according to Microsoft.
What Microsoft is changing
Microsoft’s notice describes a certificate rotation. Devices that have not installed the replacement certificates will lose access to Windows Update once the applicable expiration date passes. The notice does not describe a single change that hits every Windows PC and server on the same day. The version you run, and the minimum update level it has installed, decide which deadline applies.
Deadlines by Windows version
Microsoft’s October 8, 2026 notice lists the following requirements. Use the row that matches each device’s Windows release, not the most recent headline date.
| Windows version or group | Minimum update Microsoft states | Deadline |
|---|---|---|
| Windows 11 25H2 and later | No action required | Not stated in notice |
| Windows 11 24H2 and Windows Server 2025 | September 2025 security update or later | Before June 19, 2027 |
| Other in-support Windows 11 versions, Windows Server 2022, and in-support Windows 10 versions | July 2026 security update or later | Before June 19, 2027 |
| Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 | July 2026 security update or later | Before May 17, 2027 |
| Other Windows versions | Upgrade to a supported Windows client or Windows Server version | Before the applicable certificate expiry |
The two dates are separate deadlines. A Windows Server 2019 host and a Windows 11 24H2 workstation are not on the same schedule, even if both are patched in the same maintenance window.
#1 Best Overall
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Windows 11 25H2 and later
Microsoft says no action is required for these releases.
Windows 11 24H2 and Windows Server 2025
These devices need the September 2025 security update or a later one installed before June 19, 2027.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Other in-support Windows 11, Windows Server 2022 and in-support Windows 10 versions
These devices need the July 2026 security update or a later one installed before June 19, 2027.
Recommended Free Tools
Windows 10 Enterprise 2019 LTSC, Windows Server 2019 and Windows Server 2016
These devices need the July 2026 security update or a later one installed before May 17, 2027. This is the earliest deadline in the notice, so it should head any remediation list.
Rank #3
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Versions outside the table
For other Windows versions Microsoft advises upgrading to a supported Windows client or Windows Server release before the applicable certificate expiry. Microsoft’s table does not give a separate date for each of these versions.
Devices that are outside this change
Microsoft states that the certificate change does not apply to devices that receive updates from WSUS. Before you put a device into a remediation plan, confirm how it gets its updates. A machine that reads its updates from a WSUS server is not in scope, while a machine that connects to Microsoft’s update service directly is.
Rank #4
- WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
- 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
- 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
- CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
- LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
How to check a device against the notice
- Identify the Windows release. Run
winver, or open Settings > System > About. To read the build values from PowerShell, runGet-ItemProperty -Path 'HKLM:SOFTWAREMicrosoftWindows NTCurrentVersion' | Select-Object ProductName, DisplayVersion, CurrentBuild, UBR. - Determine the update method. Open Group Policy at Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from Windows Update and check whether “Specify intranet Microsoft update service location” is enabled and points to a WSUS server. If it does, the device is outside this change.
- Confirm the installed update level. On the device, open Settings > Windows Update > Update history and check whether the required July 2026 or September 2025 security update, or a later one, is listed. Compare the result with Microsoft’s update history for that release.
- Schedule the remaining devices. Put devices that lack the required update into a plan that finishes before the deadline for their version, starting with the May 17, 2027 group.
Connectivity problems to rule out first
Microsoft’s separate Microsoft 365 Message Center notice MC1465017, dated August 31, 2026, covers a different problem: Windows Update connection failures caused by firewalls or proxies. The notice says that TLS interception can block access, and that Windows Update can fail when required DNS subdomains are not passed through. It recommends checking the Windows Update audit logs and making sure the required hosts are trusted. This guidance is about connectivity. It does not describe the 2027 certificate rotation, but a device that cannot reach Windows Update will not receive the replacement certificates either.
- Check whether a proxy or firewall performs TLS inspection on Windows Update traffic.
- Confirm that the DNS subdomains Microsoft lists in MC1465017 resolve and pass through the proxy.
- Review the Windows Update client logs for connection or certificate errors before assuming the device is patched.
A separate date: Windows 11 24H2 Home and Pro
Microsoft’s September 8, 2026 support notice gives October 13, 2026 as the end of updates for Windows 11 24H2 Home and Pro. That is a lifecycle date for those editions. It is not the 2027 certificate expiration, and it should not be read as its deadline.
Who should act now
Start with any device that runs Windows 10 Enterprise 2019 LTSC, Windows Server 2019 or Windows Server 2016, because its deadline is May 17, 2027. Next, prioritise Windows 11 24H2 and Windows Server 2025 devices, which have the June 19, 2027 deadline and need the September 2025 update or later. Devices on other in-support releases in the table need the July 2026 update or later before June 19, 2027. Confirm the update source for every device before you count it as in scope.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
