MC1311701: Microsoft 365 apps on Mac and iOS require updates before July 13, 2026, due to certificate expiration

[Introduction]

Microsoft 365 apps use a digital certificate to validate licensing on Mac and iOS devices. This certificate will expire in July 2026 and is being proactively replaced to ensure uninterrupted app functionality. Devices running supported versions already include the updated certificate and will continue to work normally.

Devices that are not updated to the required versions may enter reduced functionality (read-only mode) after the expiration date. This update helps maintain a consistent and reliable licensing experience across supported platforms.

[When this will happen:]

• July 13, 2026:
  • The current Microsoft 365 app licensing certificate expires
  • After this date, devices running unsupported app versions on Mac or iOS will enter read-only mode until updated

[How this affects your organization:]

Who is affected:

• Organizations with managed Mac or iOS/iPadOS devices
• Devices running unsupported Microsoft 365 app versions
• Devices on unsupported operating systems

What will happen:

To maintain full functionality after July 13, 2026, devices must meet the following requirements:

• Mac:
  • macOS 12 (Monterey) or later
  • Microsoft 365 app version 16.83 or later
• iOS/iPadOS:
  • iOS 17.0 or later
  • Microsoft 365 app version 2.93 or later

If devices do not meet these requirements:

• Microsoft 365 apps (Word, Excel, PowerPoint, Outlook, OneNote) will:
  • Enter read-only mode on unsupported versions after July 13, 2026.
  • Allow users to view and print documents only.
  • Block users from:
    • Editing files
    • Creating new documents
    • Saving changes
• There is:
  • No data loss
  • No impact to Windows or Android devices
  • No security risk to customer data
• Full functionality is restored once apps are updated to supported versions.

[What you can do to prepare:]

To avoid disruption, we recommend the following actions:

• Identify affected devices
  • Review device inventory for:
    • Mac apps earlier than version 16.83
    • iOS apps earlier than version 2.93
    • Devices on unsupported OS versions
• Deploy updates
  • Use standard management tools to deploy updates:
    • Microsoft Intune for Mac and iOS devices
    • Microsoft Configuration Manager (SCCM/MECM) for co-managed Mac devices
    • Microsoft AutoUpdate (MAU) to ensure automatic updates are enabled or triggered
  • On Mac, use:
    • msupdate --install
• Address unsupported devices
  • Upgrade devices to a supported operating system where possible.
  • Replace devices that cannot meet minimum requirements.
  • Direct users to Microsoft 365 on the web as a temporary alternative.
• Verify compliance
  • Use reporting tools in Intune or Configuration Manager to confirm installed app versions.
  • Users can manually verify app versions by selecting About from the app menu (for example, Word > About Word).
• Communicate to users
  • Inform users that updates are being deployed to prevent Microsoft 365 apps from entering read-only mode.
  • No user action is required for centrally managed devices.
  • Users experiencing read-only mode should contact IT support.
  • If needed, instruct users to fully quit and reopen apps and sign out then sign back in after updates are applied.

Learn more: Certificate update for Microsoft 365 apps on managed macOS and iOS devices - Microsoft 365 Apps | Microsoft Learn

• [Compliance considerations:]No compliance considerations identified, review as appropriate for your organization.