Microsoft warns legacy Windows PCs will lose security patches after 2025 certificate change

Microsoft announced that computers still running versions of Windows that have reached end of support will no longer receive security updates once the company rotates its Windows Update signing certificate next year. The change, slated for the 2025 calendar year, means that devices on Windows 7, Windows 8.1 and earlier builds of Windows 10 will be left without the regular protection that Microsoft’s update infrastructure provides.

The move follows a long‑standing policy of ending support for older operating systems after a defined lifecycle. Windows 7 officially exited mainstream support in January 2020 and extended support ended in January 2023, while Windows 8.1 reached the end of its support window in January 2023. Microsoft has continued to issue occasional patches for critical vulnerabilities, but those were tied to a special update signing key that is now set to expire.

By tying security updates to a certificate that is renewed annually, Microsoft ensures that only devices running a supported version of the OS can validate and install new patches. When the 2025 certificate rotation occurs, any system lacking a compatible OS version will fail the signature check, effectively blocking further updates. The company cautioned that this could expose unpatched machines to known and emerging threats, especially ransomware and other malware that exploit unaddressed flaws.

Security experts say the decision underscores the importance of keeping software current. "Legacy systems become attractive targets precisely because they no longer receive patches," said a cybersecurity analyst at a major firm. Organizations that have deferred upgrades for budgetary or compatibility reasons may now face heightened risk, prompting many IT departments to accelerate migration plans to Windows 11 or supported Windows 10 builds.

Microsoft has not indicated any exceptions for specialized or embedded devices that cannot be upgraded, though it has previously offered extended security updates (ESU) for certain enterprise customers. Those programs typically require a paid license and are limited to a few years. Users of home or small‑business PCs are expected to transition to newer hardware or operating systems to maintain protection.

The announcement arrives as the tech industry continues to grapple with the balance between legacy support and security. Analysts predict that the upcoming certificate rotation will serve as a clear deadline, prompting a wave of upgrade activity in the second half of 2025. In the meantime, Microsoft recommends that users verify their Windows version, back up critical data, and consider consulting their device manufacturers for upgrade paths before the certificate change takes effect.