On October 10th, 2023 support for Windows Server 2012 and 2012 R2 will end. That means the end of regular security updates. Don't let your infrastructure and applications go unprotected. We're here to help you migrate to current versions for greater security, performance and innovation or review your options if upgrading is not viable.

 

Do you have a plan?

The reality is in many organisations, just because a vendor declares a piece of hardware or Software EOL (End of Life) or EOSL (End of Support Life) doesn’t mean you can just turn it off. The business is still using it and for what ever reason (and they are numerous) the IT Department is going to have to support that service, and software/hardware until it can be migrated, upgraded or shutdown.
So, you have Windows Server 2012r2 on your network, its running an application you can’t do without and it can’t be closed down, so let’s focus instead on what your options are.

 

Migrate to Azure:

Customers can migrate applications and databases to Azure, including Azure VMware Solution, Azure Stack HCI, Virtual Machines, Dedicated Host, and receive free Extended Security Updates for three years after the end of support date. Customers can also utilize Azure Hybrid Benefit for their Windows Server and SQL Server license which reduces the cost of consumption.

 

A bit more on Azure Stack HCI:

Azure Stack HCI is a hybrid cloud infrastructure solution that combines the power of hyperconverged infrastructure (HCI) with the flexibility of Azure. It allows you to run virtualized workloads on-premises, managed with Windows Admin Center and familiar Windows Server tools. You can also connect to Azure for hybrid scenarios like cloud-based Site Recovery, monitoring, and others.

Virtual machines on Azure Stack HCI can get Extended Security Updates (ESUs). To get ESUs for your virtual machines on Azure Stack HCI, you will need to:

  • Connect your Azure Stack HCI cluster to Azure.
  • Subscribe to Extended Security Updates in the Azure portal.

Once you have subscribed to ESUs, Azure Stack HCI will automatically deploy the security updates to your virtual machines as they are released.

 

Remain on-premise:

Option 1: Upgrade to Windows Server 2022 or the next supported version

Upgrade on-premises servers to current version (available via Monthly Billing or Volume Licencing) – Have you tested the application on Win2012r2, it may be safer to run it with limited application support than no operating system security updates, especially if you need to run it for more than 3-6months.

Option 2: Purchase Extended Security Updates for Windows Server

ESU’s provide up to three years of security updates only, so it is not a long-term solution. However, if you must remain on-premises and cannot upgrade, until this year, purchasing ESU subscriptions was your only option. However, there are restrictions with this solution.

  • ESUs are only available to buy under a Microsoft Enterprise Agreement (EA) AND to qualify you must have active Software Assurance on your existing Windows Servers. Whilst this is a suitable option for many Enterprises, it doesn’t support SMB/SMC who do not have or cannot enrol onto an EA.

 

Option 3: NEW for FY 23 - Microsoft have now launched ESU’s enabled by Azure Arc extending access to ESU to SMB/SMC organisations.

You are now able to purchase and seamlessly deploy ESUs through Azure Arc in on-premises or multicloud environments, right from the Azure portal. In addition to providing a centralized management of security patching, ESUs enabled by Azure Arc gives you more flexibility with a pay-as-you-go subscription model, compared to the classic ESU offered through the Volume Licensing Center (only available under an EA) which are purchased in yearly increments. You can also leverage additional Azure services that help better secure, monitor, and govern end-of-support servers in tandem with your Windows Server and SQL Server ESUs.

 

What is Azure Arc??

Azure Arc is a service that enables you to manage your entire environment together, including resources hosted in Azure, on-premises, and other clouds. It provides a centralized view of your resources and makes it easy to manage them using the Azure portal or the Azure CLI.

Azure Arc can be used to manage a wide variety of resources, including:

  • Servers: Windows Server, Linux, and Kubernetes clusters
  • Databases: SQL Server, PostgreSQL, and MySQL
  • Applications: Azure App Service, Azure Functions, and Azure Logic Apps

 

To use Azure Arc for extended support on on-premises servers, you will need to:

  • Have an active Azure Subscription (available under Bechtle CSP)
  • Have Software Assurance on your on-premises servers. This pre-requisite hasn’t changed but what has, is that you can now use Software Assurance bought under Microsoft licence programs outside of EA! This includes MPSA, Open and CSP Subscriptions.
  • Connect your on-premises servers to Azure Arc.
  • Subscribe to Extended Security Updates in the Azure portal.

 

Once you have subscribed to ESUs, Azure Arc will automatically deploy the security updates to your on-premises servers as they are released. ESU cost will be billed monthly under an Azure consumption. There are also no keys needed, the new Azure service performs all the authentication needed and replaces the need for acquisition, deployment, and management of keys. Additionally, an inventory view will show the Extended Security Update coverage of all Arc-enabled Windows and SQL Server machines.

 

We think that many of customers will be interested in this new option for obtaining ESU’s from Microsoft. It is encouraging to see that Microsoft have recognised a need to support organisations that must remain on-premises for a while longer, are offering a pathway to help with securing critical business workloads and more so, for providing options for SMB/SMC customers.

Microsoft have published a complete list of FAQs related to all ESU options. Read these here: Extended Security Updates for SQL Server and Windows Server | Microsoft

 

Our team of Microsoft licencing specialists and Infrastructure consultants are here to help you to navigate these options, offering Infrastructure assessments, Microsoft licencing evaluations and expert advice around the various solutions.

Reach you to your account manager or one of our specialists today to arrange a discussion.