diff --git a/coin/provisioning/common/windows/certificate-updates.ps1 b/coin/provisioning/common/windows/certificate-updates.ps1
new file mode 100644
index 00000000..f22a97a4
--- /dev/null
+++ b/coin/provisioning/common/windows/certificate-updates.ps1
@@ -0,0 +1,12 @@
+# Copyright (C) 2025 The Qt Company Ltd.
+# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
+
+# This script updates Windows Root Certifications which are usually updated weekly by Windows update
+
+. "$PSScriptRoot\helpers.ps1"
+
+$sstCerts = "C:\Windows\Temp\certificates.sst"
+Run-Executable "certutil.exe" "-generateSSTFromWU $sstCerts"
+$sstCertsPath = (Get-ChildItem -Path $sstCerts)
+$sstCertsPath | Import-Certificate -CertStoreLocation "Cert:\LocalMachine\Root" | Out-String | Measure-Object -Line
+Remove-Item -Path $sstCerts
diff --git a/coin/provisioning/qtci-windows-10-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-10-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-10-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-10_21H2-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-10_21H2-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-10_21H2-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-10_22H2-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-10_22H2-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-10_22H2-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-11_21H2-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-11_21H2-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-11_21H2-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-11_22H2-aarch64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-11_22H2-aarch64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-11_22H2-aarch64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-11_22H2-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-11_22H2-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-11_22H2-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"
diff --git a/coin/provisioning/qtci-windows-11_23H2-x86_64/00-certificate-updates.ps1 b/coin/provisioning/qtci-windows-11_23H2-x86_64/00-certificate-updates.ps1
new file mode 100644
index 00000000..3691baf2
--- /dev/null
+++ b/coin/provisioning/qtci-windows-11_23H2-x86_64/00-certificate-updates.ps1
@@ -0,0 +1 @@
+. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"