Microsoft says unsupported Windows devices will stop receiving security updates after next year’s Windows Update certificate rotation. The warning covers older installs that are still online but no longer in support, including systems that may otherwise look healthy to administrators.
Windows Update checks a trust certificate before it accepts fixes. After the rotation, unsupported copies will no longer have the right trust chain, so the update service can refuse security patches without breaking connectivity first. That leaves the machine reachable, but permanently behind on fixes.
For shops that keep kiosks, embedded PCs, lab systems, or aging admin workstations running past support, the exposure is not a noisy outage but a silent loss of patching. The risk stays with any endpoint that can fall out of support and still be left in service.
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation.