Blog Post

Azure Arc Blog
3 MIN READ

New options for Extended Security Updates enabled by Azure Arc

SatyaVel's avatar
SatyaVel
Icon for Microsoft rankMicrosoft
Jul 18, 2023

With Azure Arc, we want to empower businesses to transcend cloud boundaries and innovate from the cloud to the edge. As part of our commitment to enable seamless management. security, and innovation across diverse environments, we want to share a new offering today to help secure your end-of-support OS starting with Windows Server 2012 and SQL Server 2012.

 

We’re approaching some critical end-of-support (EoS) milestones for Windows Server 2012/R2 (October 10, 2023) and SQL Server end-of-support (July 2012, 2023 – end of year 1 for ESUs). We recognize that in some instances, customers are unable to migrate their IT infrastructure to Azure by the deadlines and need their Windows Server 2012 or SQL Server 2012 resources to stay on-premises to support their business-critical applications. To secure their EoS resources in the cloud or on-premises, many customers enroll in Extended Security Updates to avoid data breaches, malware infections, and other security breaches, which could potentially result in significant financial loss, reputational damage, and legal ramifications.

 

Today, we’re announcing Extended Security Updates enabled by Azure Arc for Windows Server 2012/R2 and SQL Server 2012 (year 2 onwards), a new and enhanced cloud experience alternative to traditional Extended Security Updates (classic). With this new option, security updates will be natively available in the Azure Portal through Azure Arc for resources for up to 3 years.

 

Extended Security enabled by Azure Arc is the best way for customers to get trusted security updates and benefit from cloud capabilities including discovery, management, and patching, all in one offering. Here are some key benefits:

  • Inventory and management: After deploying Azure Arc, customers can discover their Windows Server 2012 and SQL Server 2012 resources and manage the enrollment of Extended Security Updates in the Azure portal.
  • Pay as you Go billing: Customers will be charged on a monthly basis to enable flexibility for managing their costs and timelines.
  • Keyless delivery: Azure Arc-enabled machines do not require the acquisition or activation of keys for Extended Security Updates.
  • Modernize: Add Azure services like Microsoft Defender, Microsoft Sentinel, SQL Managed Instance, Azure Monitor, and more in your preferred environment.
  • Azure investments: Customers can leverage their Microsoft Azure Consumption Commitment (MACC) investments and manage their costs using Azure Cost Management.

 

How to deploy Extended Security Updates enabled by Azure Arc

 

Customers should start with enabling Azure Arc on their servers with their preferred option for deployment and networking.

  • Establish Azure foundation. Create an Azure account, setting up billing alongside the subscriptions and resource groups to server as a landing zone for your Arc-enabled servers.
  • Define networking approach. Select from public endpoint, proxy server, and private endpoint connectivity options to meet your organization’s networking requirements.
  • Onboard to Azure Arc. Install the Azure Connected Machine agent to connect your servers to Azure with the flexibility of at-scale deployment options like Group Policy and Configuration Manager.
  • Deploy Extended Security Updates: Once onboarded, the servers will be visible in the Azure portal with an option for activating Extended Security Updates for Windows Server 2012 Standard and R2 through the Azure portal or Azure Policy. 

Get started today!

Extended Security Updates enabled by Azure Arc are available today for purchase for Windows 2012/2012 R2 and SQL Server 2012. To prepare for the deployment, customers should ensure that their Windows Server 2012, Windows Server 2012 R2, and SQL Server 2012 machines are onboarded to Azure Arc by September 2023. 

 

Learn more:

 

 

Updated Sep 19, 2023
Version 3.0
azure arc
hybrid
servers
unified operations
update

26 Comments

Sort By
Show More
  • SparshAgrawat's avatar
    SparshAgrawat
    Icon for Microsoft rankMicrosoft
    Jul 28, 2023

    ncdlloyd2070  John_Neithercott the year 2 onwards statement refers to the SQL server ESUs. You would need to purchase the year 1 ESUs through the Volume Licensing Service Center. You'll pay for year 2 ESUs through Arc which will be reflected on the Azure bill. Hope this answers the question. 

     

    More information here Extended Security Updates for SQL Server and Windows Server | Microsoft

     

    On Azure: Customers who migrate workloads to Azure will have access to Extended Security Updates for SQL Server 2012, and Windows Server 2012 and 2012 R2 for three years after the End of Support dates for no additional charge above the cost of running the virtual machine.

    On-premises and in hosted environments: Eligible customers will be able to purchase Extended Security Updates. Licenses are sold in 2 core packs for SQL Server and 16 core packs for Windows Server 2012, and are priced as below:

    Year 1: 100% of full license price annually*

    Year 2: 100% of full license price annually

    Year 3: 100% of full license price annually

    *SQL Server 2012 Year 1 ESUs were 75% of the full license price

     

    Can I onboard later and buy just Year 2 of 2012 Extended Security Updates?

    Customers who require 2012 outside Azure (where Extended Security Updates are available at no additional charge) can onboard on Year 2 of 2012 Extended Security Updates. However, if an organization did not purchase the first year of Extended Security Updates coverage, they will need to purchase both Year 1 and Year 2 Extended Security Updates. Similarly, if an organization onboards only on Year 3, they will need to purchase all three years of Extended Security Updates.

  • John_Neithercott's avatar
    John_Neithercott
    Copper Contributor
    Jul 20, 2023

    Thanks for that response, but that article does not cover this newly announced capability. As was mentioned above, is Year one included and you only have to pay for year two on? That phrasing in the post is less than clear.

  • SparshAgrawat's avatar
    SparshAgrawat
    Icon for Microsoft rankMicrosoft
    Jul 20, 2023

    John_Neithercott please refer to the FAQ section here Extended Security Updates for SQL Server and Windows Server | Microsoft

     

    • In Azure: Customers running Windows Server 2012 or 2012 R2 or SQL Server 22012 in an Azure Virtual Machine will get Extended Security Updates for no additional charges above the cost of running the virtual machine. Customers moving to Azure SQL Managed Instance (PaaS) do not need Extended Security Updates, as this is a fully managed solution, and is always updated and patched by Microsoft.

      On-premises: Customers with active Software Assurance or subscription licenses can purchase Extended Security Updates for approximately 100% of the on-premises license cost annually. Pricing is available on published price lists. Contact your Microsoft partner or account team for more details.

      Hosted environments: Customers who license Windows Server 2012/2012 R2 or SQL Server 2012 through an authorized SPLA hoster will need to separately purchase Extended Security Updates under an Enterprise or Server and Cloud Enrollment either directly from Microsoft for approximately 100% of the full on-premises license cost annually or from their Microsoft reseller for use in the hosted environment. The price of Extended Security Updates acquired through Microsoft resellers is set by the reseller. Pricing for Windows Server Extended Security Updates is based on Windows Server Standard per core pricing, based on the number of virtual cores in the hosted virtual machine, and subject to a minimum of 16 licenses per instance. Pricing for SQL Server Extended Security Updates is based on SQL Server per core pricing, based on the number of virtual cores in the hosted virtual machine, and subject to a minimum of 4 licenses per instance. Software Assurance is not required. Contact your Microsoft reseller or account team for more details.

  • ncdlloyd2070's avatar
    ncdlloyd2070
    Copper Contributor
    Jul 20, 2023

    Price would be very useful. The announcement includes the line year 2 onwards, is there a requirement to purchase the first year of ESU through other channels?