How do I update my Windows OS to ensure it receives extended security updates?
To ensure your Windows OS continues to receive extended security updates, follow the tips below:
Check Your Windows Version
- Windows 11: Actively supported.
- Windows 10: Most versions receive updates until October 14, 2025, but eligible for paid Extended Security Updates (ESU) until October 13, 2026.
- Windows 7/8.1: Out of regular support, and no longer eligible for paid Extended Security Updates (ESU) on January 10, 2023.
- Windows Server 2008: Out of regular support, and no longer eligible for paid Extended Security Updates (ESU) on January 10, 2023.
- Windows Server 2012: Out of regular support, but eligible for paid Extended Security Updates (ESU) until October 13, 2026.
- Windows Server 2016: Most versions receive updates until January 12, 2027.
- Windows Server 2019: Most versions receive updates until January 9, 2029.
- Windows Server 2022: Most versions receive updates until October 14, 2031.
- Windows Server 2025: Most versions receive updates until November 14, 2034.
Stay Updated
- Open Settings > Update & Security > Windows Update.
- Select Check for updates and install any available updates.
- Ensure your system is not running an unsupported version (like Windows 10 1909 or earlier, or Windows 7/8.1).
Consider Upgrading
If your current OS is nearing end of support, upgrade to a supported version (Windows 10 latest build, or Windows 11, if your device meets hardware requirements).
Extend Security Updates (ESU)
- For individuals:
- Microsoft rarely offers ESUs outside of organizations. For personal users, upgrading to a supported OS is recommended.
- For Organizations/Businesses:
- Purchase ESUs via Microsoft's volume licensing or Cloud Solution Providers. Deploy ESU licenses and activate them on each device that requires updates.
- For Windows Server or Windows Embedded:
Automatic Updates
- Enable automatic updates to ensure you always get new security patches.
- To enable, navigate to Settings > Update & Security > Windows Update > Advanced Options.
- Turn on "Automatically download updates, even over metered data connections."
Regularly Check Microsoft's Lifecycle Page
In Summary
- Upgrade to Windows 10/11 for continued updates.
- For ESU on older versions, your organization needs to purchase and activate licenses.
- Keep automatic updates on.
My Windows Operating System is part of an organization. My organization has purchased Extended Security Updates for my Windows Operating System and I have been given a key. What do I do with the key to ensure I get security updates?
Below is how you can use your Extended Security Updates (ESU) key to ensure your Windows OS receives security updates. Follow the steps below to activate your ESU key:
- Verify System Requirements
- Ensure your Windows OS matches the version eligible for ESU (typically Windows 7 SP1, Windows Server 2008/R2, or Windows 8.1).
- Make sure all prerequisite updates are installed, especially the Servicing Stack Update (SSU).
- Install Prerequisite Updates
- Refer to the Microsoft ESU Prerequisite Article for your specific OS.
- Usually, you'll need the latest SSU and SHA-2 code signing support updates.
- Activate ESU Key
- Open Command Prompt as Administrator
- Press Win + X, select Command Prompt (Admin) or Windows PowerShell (Admin).
- Enter the ESU Key Command
- Type the following command (replace with your provided key): slmgr /ipk
- Example: slmgr /ipk 12345-ABCDE-67890-FGHIJ-12345
- Activate the ESU key
- Enter the following command: slmgr /ato
- Wait for confirmation — it should say "Product activated successfully."
- Verify Activation
- You can check ESU activation status with: slmgr /dlv
- Look for "License Status: Licensed."
- Run Windows Update
- Go to Settings > Update & Security > Windows Update.
- Select Check for updates.
- Install any available security updates.
Other Notes
If your organization uses volume activation or multiple activation keys (MAK), the IT department might do this via remote scripts or Group Policy. If you encounter errors, note the error code and share it with your IT department or Microsoft Support.
You are now set up to receive Extended Security Updates on your system after these steps!