Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies to: Azure Local 2311.2 and later
The Extended Security Update (ESU) program enables you to get important security patches for legacy Microsoft products that are past the end of support. Getting ESU through Azure Local comes with additional benefits and implementation steps. This article explains the specifics for Azure Local.
To get general information about the ESU program, products that are covered, and support dates, see the Product Lifecycle FAQ. For detailed steps to set up legacy OS support, see Azure verification for VMs.
Note
Azure Local customers can obtain ESUs at no cost through Azure verification for VMs by following the instructions in this article. If you have an Arc-enabled server that isn't on Azure Local, you should consider obtaining ESU licenses through Arc. For more information, see Deliver Extended Security Updates (through Arc).
FAQ
What ESU products does this cover?
ESU covers Windows Server and Windows client products under the ESU program. For more information, see the product lifecycle FAQ.
Does this cover ESUs for Windows Server 2012?
Yes it does.
Does my VM need to be connected to get ESUs?
No, you don't need internet connectivity to install ESUs, unless you're using an update method that requires internet connectivity to download ESU packages. Only the Azure Local host needs to maintain 30-day internet connectivity for Azure VM verification to remain active.
Can I still use MAK keys to get ESUs for VMs on Azure Local?
Yes. If you have already bought MAK keys, you can still apply them with the instructions outlined in Obtaining Extended Security Updates for eligible Windows devices. However, MAK keys aren't free. Consider switching to the Azure verification for VMs approach so that you can automatically get free ESUs through your Azure Local going forward.
Can I discover ESUs if I don't have Azure verification for VMs?
Yes. You can discover ESUs even if you don't have Azure VM verification. For the installation, you must set up Azure verification for VMs (or MAK keys).
Can I get ESUs through Azure Virtual Desktops (AVD) on Azure Local?
Yes. All Azure Virtual Desktop session hosts running Windows 10, version 22H2 are entitled to Windows 10 Extended Security Updates (ESU) at no additional cost. For more information, read about the Extended Security Updates (ESU) program for Windows 10. For creating new session hosts, there are two Windows 10, version 22H2 client multi-session images in Azure Marketplace: one with Microsoft 365 Apps and one without. The image with Microsoft 365 Apps will be retired and removed from Azure Marketplace in the near future, while the image without Microsoft 365 Apps will remain until the end of ESU support. More information on deployment.
Do I need to do anything to renew for Year 1, Year 2, Year 3...?
No. Once you set up Azure verification for VMs, you don't need to renew or do anything else.