Videos
How do I install ESU updates?
On Azure: Applicable virtual machines (VMs) hosted in Azure are automatically enabled for ESUs if the VM is configured to receive updates, and these updates are provided free of charge.
On-premises/hybrid: Customers can install ESUs by accessing their multiple activation keys through the M365 Admin Center portal or directly installing ESUs through Azure Arc-enabled servers. Learn more about the installation details here for Windows Server and here for SQL Server installation.
How to obtain an ESU license outside of Azure?
Customers have two options for licensing ESU (ESU):
- Via Azure Arc-enabled servers: With Extended Security Updates enabled by Azure Arc.
- Commercial Licensing: Acquire Extended Security Updates licenses (SKUs) through a Microsoft Commercial Licensing program.
For maximum flexibility and convenience, we recommend using Azure Arc-enabled servers.
You can acquire ESU licenses either directly from Microsoft or from your partner such as an EA Reseller or CSP partner (eligible to sell ESUs as of Oct. 1, 2023 for both types of ESUs mentioned above).
Eligibility Criteria
To qualify for ESU on-premises or in hosted environments, your server or operating system must meet one of the following prerequisites:
- Be covered by an active Software Assurance (SA) plan acquired through any program, such as Enterprise Agreement (EA), Enterprise Agreement Subscription (EAS), Server & Cloud Enrollment (SCE), or Enrollment for Education Solutions (EES).
- Have active subscription licenses acquired through any program, including Cloud Solution Provider (CSP).
- Have been acquired as 'License-Included' services through a Service Provider License Agreement (SPLA) partner.
Note
"License-Included" means that you have obtained Windows Server or SQL Server licenses directly from a SPLA partner, rather than using your own licenses.
Deployment scenarios
You can apply ESU enabled by Azure Arc and ESU licenses (SKUs) to any properly licensed server or operating system, whether it's deployed on-premises or on non-Azure clouds (including hosters). If you're running your OS in another cloud, make sure to adhere to the respective outsourcing or License Mobility policies for the underlying software.
Examples:
- SPLA Scenario: If you've acquired your software from an SPLA partner, you can cover it with ESU licenses.
- BYOL Scenario: If you've brought your own licenses to a cloud hosting provider via your Outsourcing policy or License Mobility, you can cover your software with ESU licenses.
- On-premises: If you're running your software on-prem, you can cover it with ESU licenses.
ESU Availability and End Dates
| Products | End of Extended Support/ESU Start Date | ESU End Date Year 1 | ESU End Date Year 2 | ESU End Date Year 3 | Type of Security Update |
|---|---|---|---|---|---|
| Windows Embedded POSReady 7* | October 12, 2021 | October 11, 2022 | October 10, 2023 | October 8, 2024 | Critical, Important |
| SQL Server 2012 | July 12, 2022 | July 11, 2023 | July 9, 2024 | July 8, 2025 | Critical |
| Windows Server 2012/R2 | October 10, 2023 | October 8, 2024 | October 14, 2025 | October 13, 2026 | Critical, Important |
| SQL Server 2014 | July 9, 2024 | July 8, 2025 | July 14, 2026 | July 12, 2027 | Critical |
| Windows 10*** | October 14, 2025 | October 13, 2026 | October 12, 2027 | October 10, 2028 | Critical, Important |
* Extended Security Updates for select Embedded products are available via OEMs. All others are available via volume licensing.
** One additional year of ESU is available for Windows Server and SQL Server 2008 and 2008 R2 only on Azure.
*** The editions that qualify for the Windows 10 ESU include Enterprise, Education, and Pro in Commercial use.
Extended support costs $61 per year, for up to three years.
https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates
On-premises: Eligible customers will be able to purchase Extended Security Updates for their on-premises environment. Licenses are sold in 2 core packs for SQL Server and 16 core packs for Windows Server 2012, and are priced as below:
Year 1: 75% of full license price annually
Year 2: 100% of full license price annually
Year 3: 125% of full license price annually
https://www.microsoft.com/en-us/windows-server/extended-security-updates
--please don't forget to upvote and Accept as answer if the reply is helpful--
It says if we migrate our on-prem 2012 servers to Azure we get free ESU licenses, does that mean if we onboard on-prem servers to azure as Arc servers we get licenses? or for ARC enabled servers also we need to manually add ESU licenses?