Extended Security Updates (ESUs)

If your OS is past the official end-of-support date and your devices can't be upgraded quickly, Extended Security Updates (ESUs) are there to give you time to plan and execute your upgrade or migration without leaving your systems vulnerable.

The Basics:

A paid, temporary solution to provide you time to transition

Typically available for up to 3 years after end of support

Provides 'critical' security updates to your OS

No feature updates, design change requests, or non-security bug fixes

Available on a by-edition basis, "if and when available"

Requires enrollment or licensing through Microsoft or authroized distributors

Process to Enroll:

1.

Identify Devices That Need ESU

Check the lifecycle dates of your OS to help confirm if your devices are approaching (or past) their end of life date.

2.

Purchase ESU Licenses

Contact Kontron to purchase the necessary licenses and clarify any questions about eligibility or coverage.

3.

Register Devices with Microsoft

Upon purchase, Kontron will provide activation keys and instructions on how to register and begin receiving updates.
Interested in Getting an Extended Security Update?

Interested in Getting an Extended Security Update?

If you have devices that you want to protect beyond end-of-support, don't wait. Plan your next steps today.

Kontron can help you confirm eligibility, purchase licenses, and guide you through registering your devices so you can continue to receive critical updates.

Check Eligibility

FAQ

What is the difference between EOS and EOL?

EOS (End of Support) means Microsoft will no longer release regular feature or security updates for the product. EOL (End of Life) means an OEM may no longer purchase or ship devices with this product.

What happens to the operating system and devices in market if I do not buy ESU?

Windows will continue to function. Devices will continue functioning but will be subject to new security risks since Microsoft security updates will not be available to protect the devices.

What are the ESU Program requirements?

OEMs must have the following agreements: Microsoft Business & Services Agreement (MBSA), Customer Licensing Agreement (CLA), Ecosystem Partner Services Offering (EPSO) Service Terms (ST), EPSO Fee Schedule (FS), EPSO-ESU Service Terms Schedule. Kontron will help facilitate the agreement process in conjunction with Microsoft.

What is included in the ESU Program?

Microsoft MSRC “Important” and “critical” security updates and bulletins along with support to resolve issues related to ESU deployment and updates.

How do I purchase or sign up for ESU Program?

Contact Kontron.

How are updates deployed?

After the three ESU components are installed on the device, the monthly ESU Security Updates can be installed with your current update process.

How long is the ESU valid?

The ESU Keys are valid for one year and ESU Program runs for three years post EOS date.

My customer devices are not connected to the Internet. How can I activate the keys?

The ESU activation keys do not require a connection to the internet.

Will a new key need to be installed on every device?

Yes, this is a requirement of the program to support ESU updates.

What is an EPSO and is it required?

The Ecosystem Partner Service Offering (EPSO) is a support agreement with Microsoft that can be applied to updates with this program or other support needs. An EPSO is required to participate into the program.