Windows 7 Extended Security Updates (ESU) requirements

win7 [German]Microsoft has defined the requirements for Extended Security Updates (ESU) and provides a test update to check, if a machine is ready for ESU. Here is some information about what you need to know about Extended Security Updates.


Advertising

What is the ESU program?

As of January 14, 2020, support for Windows 7 SP1 will end and the operating system will no longer receive security updates. Exceptions are only systems in enterprise environments, where support has been purchased through the Extended Security Update (ESU) program. I had blogged about the extended security update support in articles like Wow! Windows 7 get extended support until January 2023 (see also the links at the end of the article).

Microsoft defines requirements for systems

It now appears that Microsoft is preparing the final steps so that appropriate systems can receive and install these advanced security updates. I became aware of this topic through a tweet by Woody Leonhard.

A visitor of his site noticed, that the Microsoft Update Catalog contains a 'Preparation Updates' section to provide support for extended security update support.

Microsoft Update Catalog
(Microsoft Update Catalog, Quelle: askwoody.com)


Advertising

Furthermore, on November 5, 2019, Microsoft released the support article (Update to verify that eligible Windows 7 SP1 and Server 2008 R2 SP1 devices can get Extended Security Updates) for Update KB4528069. The test update is available for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 via Microsoft Update Catalog or via WSUS.

This optional non-security update allows administrators to verify that your eligible Windows 7 Service Pack 1 (SP1) and Server 2008 R2 SP1 devices can continue to receive Extended Security Updates (ESUs) after the support date expires on January 14, 2020.

A system that shall receive security updates after January 14, 2020, the following prerequisites must be met, according to the Microsoft support article.

  1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU update:
    • 4474419 SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019
    • 4490628 Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019
  2. Install the following servicing stack update (SSU) and monthly rollup:
    • 4516655 Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019
    • 4519976 October 8, 2019—KB4519976 (Monthly Rollup)

In addition, an ESU key must be installed and activated. Information on installing and activating the ESU key was published by Microsoft in mid-October 2019 in the Tech Community article How to get Extended Security Updates for eligible Windows devices.

So it's clear that only systems that have been enabled with an appropriate ESU key will receive enhanced security updates. After activation, administrators can continue to use their current update and services strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), or any other preferred update management solution.

Similar articles:
Wow! Windows 7 get extended support until January 2023
Windows 7 Extended Security Updates buyable from April 2019
Microsoft offers Windows 7 Extended Update Support to SMBs
Prices for Windows 7 Extended Security Updates till 2023
Windows 7: Office 365 ProPlus Updates till 2023


Cookies helps to fund this blog: Cookie settings
Advertising


##1

This entry was posted in Update, Windows and tagged , . Bookmark the permalink.

One Response to Windows 7 Extended Security Updates (ESU) requirements

  1. EP says:

    the Win7 ESU requirements only apply to Enterprise and Professional editions of Windows 7 only. they don't apply nor concern those using consumer editions of Windows 7 like Home and Ultimate editions

Leave a Reply

Your email address will not be published. Required fields are marked *