Windows 7 - Extended Security Updates (ESU)

Application Information

Inquiry Resolution

General Information

1. End of Support Date
2. ESU Program Overview
3. Services Offered for ESU Program
4. Installation Prerequisites

How To

1. How to get the ESU Product Key?
2. How to install the ESU Product Key?
3. How to activate the ESU Product Key?

General Information

Windows 7 will reach end of support on January 14, 2020. However, you can purchase ESU for up to three years to receive security updates.

The ESU program provides access to important security patches for Windows 7. These updates provide several stability, performance, and security improvements to the operating system.

Here are the services that are offered for ESU program:

Installation prerequisites:

1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or later SSU:
   1. Windows 7 SP1 and Windows Server 2008 R2 SP1:
      • Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019.
      • And
      • SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019.
   2. Windows Server 2008 SP2:
      • Servicing stack update for Windows Server 2008 SP2: April 9, 2019.
      • And
      • SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019.

1. Install the following SSU and monthly rollup:
   1. Windows 7 SP1 and Windows Server 2008 R2 SP1:
      • Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019.
      • And
      • October 8, 2019: Monthly Rollup.
   2. Windows Server 2008 SP2:
      • Servicing stack update for Windows Server 2008 SP2: September 10, 2019.
      • And
      • October 8, 2019: Monthly Rollup.

1. Once activated, continue to use your current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), Microsoft Update Catalog, or whichever patch management solution you prefer.

How To

1. How to get the ESU Product Key?
   1. Go to Microsoft Online Portal.
   2. Log in using your Administrator account.
   3. Click the Window tile icon on the upper left corner of the page.
   4. Go to Billing.
   5. Click Products and Services.
      • 
   6. Copy the key.

1. How to install ESU Product Key?
   1. Open a command prompt.
   2. Type slmgr /ipk [ESU key] then press Enter.
   3. If the product key is installed successfully, you will see a message similar to the following:
      • 
   4. Next, find the ESU Activation ID.
   5. In the command prompt, type slmgr /dlv then press Enter.
   6. Note the Activation ID as you will need it in the next step.
      • 

1. How to activate the ESU Product Key?
   1. Open a command prompt.
   2. Type slmgr /ato [ESU Activation Id] then press Enter.
      • 

• Once the ESU product key is activated, verify the status at any time by following these steps:
  1. Open a command prompt.
  2. Type slmgr /dlv then press Enter.
  3. Verify the licensed status. It must show as Licensed for the corresponding ESU program.
     • 

Recommendation: Use a management tool such as System Center Configuration Manager to send the slmgr scripts to your enterprise devices.

To install and activate ESU for machines that are not connected to the Internet, you must follow these steps:

1. Download and install the Volume Activation Management Tool (VAMT).
2. Download the VAMT – ESU configuration file and update your VAMT configuration file.
3. Configure the client device’s firewall for VAMT.
4. Add the ESU Product Key to VAMT.

For computers that will not connect to the Internet for activation, you can use the VAMT to perform proxy activation. However the October 15, 2019 (Preview of Monthly Rollup) must be installed first.

If you use the VAMT for activation, the tool has the ability to pick up the activation ID as shown below:

Reminders:

1. Windows 7 requires separate activation key for ESU program. There should be 1 ESU Product Key/Multiple Activation Key (MAK) per year and the price will differ as you continue.
2. For ESU purchased from Volume licensing (VL), follow these steps to contact VL support if installation or activation fails.
   1. Go to Microsoft Volume Licensing Service Center.
   2. Select your country or region from the drop-down menu.
      • 
   3. See the Support Center Contact Info at the right part of the page.
      • 
3. The SKU are:
   1. Windows 7 Extended Security Updates 2020
   2. Windows 7 Extended Security Updates 2021
   3. Windows 7 Extended Security Updates 2022
   • Since the SKU is different, the renewal process is not automatic.
4. You cannot buy 2021 or 2022 without buying the updates from the previous years.
5. Technical Support is not included.

You may also read or watch the related topics for reference:

• More FAQs about Extended Security Updates for Windows 7
• Windows 7 support will end on January 14, 2020
• How to extend Windows 7 Support by ESU program

Other Resources Available

Extra training and support resources are available at:

• Microsoft Support Center
• Microsoft Office 365 YouTube Channel