Free Extended Security Updates (ESU) through Azure Local
Applies to: Azure Local, versions 23H2 and 22H2
The Extended Security Update (ESU) program enables you to get important security patches for legacy Microsoft products that are past the end of support. Getting ESU through Azure Local comes with additional benefits and implementation steps. This article explains the specifics for Azure Local.
To get general information about the ESU program, products that are covered, and support dates, see the Product Lifecycle FAQ. For detailed steps to set up legacy OS support, see Azure verification for VMs.
Note
Azure Local customers can obtain ESUs at no cost through Azure verification for VMs by following the instructions in this article. If you have an Arc-enabled server that is not on Azure Local, you should consider obtaining ESU licenses through Arc. For more information, see Deliver Extended Security Updates (through Arc).
FAQ
What ESU products does this cover?
ESU covers Windows Server and Windows client products under the ESU program. For more information, see the product lifecycle FAQ.
Does this cover ESUs for Windows Server 2012?
Yes it does.
Does my VM need to be connected to get ESUs?
No, you don't need internet connectivity to install ESUs, unless you're using an update method that requires internet connectivity to download ESU packages. Only the Azure Local host needs to maintain 30-day internet connectivity for Azure VM verification to remain active.
Can I still use MAK keys to get ESUs for VMs on Azure Local?
Yes. If you have already bought MAK keys, you can still apply them with the instructions outlined in Obtaining Extended Security Updates for eligible Windows devices. However, MAK keys aren't free. Consider switching to the Azure verification for VMs approach so that you can automatically get free ESUs through your Azure Local going forward.
Can I discover ESUs if I don't have Azure verification for VMs?
Yes. You can discover ESUs even if you don't have Azure VM verification. For the installation, you must set up Azure verification for VMs (or MAK keys).
Can I get ESUs through Azure Virtual Desktops (AVD) on Azure Local?
The operating systems currently supported for AVD on Azure Local aren't yet eligible for ESUs. See the list here.
Do I need to do anything to renew for Year 1, Year 2, Year 3...?
No. Once you set up Azure verification for VMs, you don't need to renew or do anything else.