Obtaining Extended Security Updates (ESU) for Windows Server

Key Notes

  • ESU extends the support cycle of Windows Server by several years, facilitating smoother migration.
  • Activation for ESU requires Azure Arc or access to a Microsoft Activation Key.
  • Linking resources to the ESU license is essential for receiving updates beyond the standard support period.

Essential Guide to Obtaining and Delivering Extended Security Updates (ESU) for Windows Server

Extended Security Updates (ESU) are pivotal for organizations that rely on outdated Windows Server versions, as they offer crucial security updates beyond the official support timelines. This guide provides step-by-step instructions on how to obtain and effectively deliver ESU, ensuring your legacy systems remain secure in today’s digital landscape.

How to Obtain Extended Security Updates (ESU) for Windows Server

Step 1: Connect to Azure Arc

To activate ESU for Windows Server 2012 and 2012 R2, connect your servers to Azure Arc:

  1. Visit login to Azure Portal and sign in.
  2. Search for “Servers – Azure Arc” and open the relevant entries.
  3. Add your server to Azure Arc.

Pro Tip: Make sure your Azure Arc connection is stable to avoid delays.

Step 2: Access the Microsoft Activation Key

In case you can’t connect to Azure Arc, you can access the MAKey through the Windows Admin Center:

  1. Sign into your Microsoft 365 Admin Center.
  2. Navigate to Your Products > Volume Licensing > View Contracts.
  3. Select the agreement number associated with your ESU purchase, click on the three dots (More Actions), and choose View Product Keys.
  4. Note down the MAKey for use on new servers.

Pro Tip: Screen capture the keys for future reference before making any changes.

Delivering Extended Security Updates for Windows Server

Step 3: Manage and Create an Azure License

To begin with, provision the ESU license from Azure Arc for outdated Windows Server.

  1. Go to the Azure Portal.
  2. Navigate to the Azure Arc page.
  3. In the Extended Security Updates tab, review eligible resources.
  4. Click Create to initiate a new license, filling in the required fields.
  5. After reviewing, click Create again to add it to the list.

Pro Tip: Double-check the details provided in the license fields for accuracy.

Now, ensure that your resources are linked to enable their ESU activation:

  1. On the Azure Portal, go to the Extended Support Updates tab.
  2. Click on the Eligible Resources tab to view Arc-enabled machines.
  3. Select one or more eligible machines by ticking their checkboxes.
  4. Click on Enable ESUs.
  5. The system displays the count of machines chosen for ESU activation. Select a relevant license and click Enable.

Pro Tip: Monitor the status of your machines post-activation for successful ESU delivery.

What is the Difference between Extended Security Update and Extended Support?

Extended Support refers to the mainstream support phase with security updates and paid assistance. However, it lacks new features. In contrast, Extended Security Updates (ESU) provides security updates beyond the product’s lifecycle, ensuring continued protection for legacy systems.

How to Check if ESU is Activated?

A server administrator can verify the ESU status via the Azure Admin Center by navigating to Extended Security Updates > Eligible Resources. This section lists all resources with active ESU.

Summary

Extended Security Updates (ESU) play a crucial role in safeguarding legacy Windows Server systems beyond their support lifecycle. By connecting to Azure Arc or using a Microsoft Activation Key, organizations can efficiently obtain and manage ESU, ensuring continuous security and compliance across their infrastructure.

Conclusion

Implementing Extended Security Updates empowers organizations to maintain the security of their aging Windows Server infrastructure. Adhering to the outlined steps ensures efficient management and delivery of these critical updates, enabling seamless operations while planning for future migrations or upgrades.

FAQ (Frequently Asked Questions)

What is the duration of the Extended Security Updates program?

The Extended Security Updates program offers security updates for three additional years after the end of mainstream support for eligible Windows Server products.

What are the costs associated with Extended Security Updates?

The cost for ESU may vary based on your organization’s licensing agreement with Microsoft. Typically, there is an annual fee per server to cover ESU eligibility.