Certificate update for Microsoft 365 apps on managed macOS and iOS devices - Microsoft 365 Apps | Microsoft Learn
Table of contents
Exit editor mode
Ask Learn
Ask Learn
Reading mode
Table of contents
Read in English
Add
Add to plan
Edit
Copy Markdown
Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Certificate update for Microsoft 365 apps on managed macOS and iOS devices
Feedback
Summarize this article for me
Who this guidance is for
IT administrators managing Microsoft 365 apps on Mac or iOS devices.
Important
A licensing update for Microsoft 365 apps on macOS and iOS takes effect on July 13, 2026 . Devices that aren't updated to a supported app version enter reduced functionality mode , where users can open and view files but can't edit, save, or access full features. Administrators should ensure that all managed macOS and iOS devices run the versions needed to keep Microsoft 365 apps fully functional after July 13, 2026.
This issue only affects macOS and iOS devices. Windows and Android devices aren't affected.
Summary
Microsoft 365 apps use a digital certificate to validate licensing. The certificate currently in use expires on July 13, 2026. Apps that are updated to the minimum required versions already include the renewed certificate and continue to function normally. Apps on older versions enter reduced functionality mode after the certificate expires.
This isn't a security vulnerability. No customer data is at risk. The resolution is to update Microsoft 365 apps to the minimum required versions.
What administrators need to do
Identify affected devices
Devices are affected if they're running Microsoft 365 apps below the minimum required versions. Review your managed device inventory to identify:
macOS devices running Microsoft 365 apps earlier than version 16.83
iOS devices running Microsoft 365 apps earlier than version 2.93
Devices on operating system versions that can't support the required app update. For more information, see Upgrade macOS to continue receiving Office updates.
Deploy updates to affected devices
Use your organization's standard update management tools to deploy the required app versions:
Microsoft Intune: Use app update policies to target managed macOS and iOS devices. For macOS devices, you can deploy updates through Microsoft AutoUpdate (MAU) policies. For iOS devices, use app store update management. For more info, see Manage Microsoft 365 apps for macOS with Intune.
Microsoft Configuration Manager (SCCM/MECM): For co-managed macOS devices, deploy the latest Microsoft 365 app package. For more info, see Manage Microsoft 365 Apps updates with Configuration Manager.
Microsoft AutoUpdate (MAU): If your organization uses MAU preferences to manage updates, ensure that automatic updates are enabled or trigger a manual update cycle. For more info, see Update Office for macOS by using msupdate.
Tip
You can use the msupdate command-line tool to trigger updates on macOS devices remotely. Run msupdate > install to update all Microsoft 365 apps to the latest available version.
Identify devices that can't be updated
Some devices can't receive the required update because they're running an operating system version that is too old. For these devices:
Upgrade the operating system: Where possible, upgrade devices to a supported OS version to enable the app update.
Migrate users to supported hardware: If devices can't be upgraded, plan to transition affected users to hardware that meets the minimum requirements.
Direct users to Microsoft 365 for the web: As an interim solution, affected users can access Word, Excel, PowerPoint, and other apps at microsoft.com from any supported browser. Web access is included with all Microsoft 365 subscriptions.
Minimum OS version requirements
Devices must run the following minimum operating system and app versions for Microsoft 365 apps to function correctly after July 13, 2026:
Platform<br>Minimum OS version<br>Minimum app version
macOS<br>macOS 12 (Monterey) or later<br>16.83
iOS / iPadOS<br>iOS 17.0 or later<br>2.93
Note
Microsoft supports Microsoft 365 apps on the three most recent major versions of macOS. As new macOS versions are released, the oldest supported version is dropped. For current supported versions, see Upgrade macOS to continue receiving Microsoft 365 and Office for macOS updates.
For details about which app builds include the renewed certificate, see Update history for Office for macOS.
Verifying update compliance
After deploying updates, verify that devices run the required minimum versions:
Microsoft Intune: Use the Discovered apps report to view installed app versions across managed devices. Filter by Microsoft 365 app names and compare against the minimum versions listed in the preceding table.
Configuration Manager: Use software inventory or compliance baselines to...