[German]Microsoft has defined the requirements for Extended Security Updates (ESU) and provides a test update to check, if a machine is ready for ESU. Here is some information about what you need to know about Extended Security Updates.
Advertising
What is the ESU program?
As of January 14, 2020, support for Windows 7 SP1 will end and the operating system will no longer receive security updates. Exceptions are only systems in enterprise environments, where support has been purchased through the Extended Security Update (ESU) program. I had blogged about the extended security update support in articles like Wow! Windows 7 get extended support until January 2023 (see also the links at the end of the article).
Microsoft defines requirements for systems
It now appears that Microsoft is preparing the final steps so that appropriate systems can receive and install these advanced security updates. I became aware of this topic through a tweet by Woody Leonhard.
Microsoft starts testing infrastructure for Win7 Extended Security Update (ESU) patches. There are four new ESU-related patches in the Catalog. #PatchLady has details. https://t.co/ZSOKLPLXXb
— Woody Leonhard (@AskWoody) November 7, 2019
A visitor of his site noticed, that the Microsoft Update Catalog contains a 'Preparation Updates' section to provide support for extended security update support.
(Microsoft Update Catalog, Quelle: askwoody.com)
Advertising
Furthermore, on November 5, 2019, Microsoft released the support article (Update to verify that eligible Windows 7 SP1 and Server 2008 R2 SP1 devices can get Extended Security Updates) for Update KB4528069. The test update is available for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 via Microsoft Update Catalog or via WSUS.
This optional non-security update allows administrators to verify that your eligible Windows 7 Service Pack 1 (SP1) and Server 2008 R2 SP1 devices can continue to receive Extended Security Updates (ESUs) after the support date expires on January 14, 2020.
A system that shall receive security updates after January 14, 2020, the following prerequisites must be met, according to the Microsoft support article.
- Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU update:
- Install the following servicing stack update (SSU) and monthly rollup:
In addition, an ESU key must be installed and activated. Information on installing and activating the ESU key was published by Microsoft in mid-October 2019 in the Tech Community article How to get Extended Security Updates for eligible Windows devices.
So it's clear that only systems that have been enabled with an appropriate ESU key will receive enhanced security updates. After activation, administrators can continue to use their current update and services strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), or any other preferred update management solution.
Similar articles:
Wow! Windows 7 get extended support until January 2023
Windows 7 Extended Security Updates buyable from April 2019
Microsoft offers Windows 7 Extended Update Support to SMBs
Prices for Windows 7 Extended Security Updates till 2023
Windows 7: Office 365 ProPlus Updates till 2023
Advertising
the Win7 ESU requirements only apply to Enterprise and Professional editions of Windows 7 only. they don't apply nor concern those using consumer editions of Windows 7 like Home and Ultimate editions