From d48a50a926e24b269c9c2953dc23cd9d4ab6ad61 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 13 May 2025 11:15:41 -0700 Subject: [PATCH 01/15] esu-enable-10014911 --- windows/whats-new/TOC.yml | 2 ++ .../enable-extended-security-updates.md | 20 +++++++++++++++++++ 2 files changed, 22 insertions(+) create mode 100644 windows/whats-new/enable-extended-security-updates.md diff --git a/windows/whats-new/TOC.yml b/windows/whats-new/TOC.yml index f7564e0af6..2b26d9e64e 100644 --- a/windows/whats-new/TOC.yml +++ b/windows/whats-new/TOC.yml @@ -24,6 +24,8 @@ items: - name: Extended Security Updates (ESU) program for Windows 10 href: extended-security-updates.md + - name: Enable Extended Security Updates (ESU) + href: enable-extended-security-updates.md - name: What's new in Windows 10, version 22H2 href: whats-new-windows-10-version-22H2.md - name: Windows Enterprise LTSC diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md new file mode 100644 index 0000000000..f3a2ece075 --- /dev/null +++ b/windows/whats-new/enable-extended-security-updates.md @@ -0,0 +1,20 @@ +--- +title: Enable Extended Security Updates (ESU) +description: Learn how to enable the Extended Security Updates (ESU) keys for Windows 10. The ESU program gives customers the option to receive security updates for Windows 10. +ms.service: windows-client +ms.subservice: itpro-fundamentals +ms.author: mstewart +author: mestew +manager: aaroncz +ms.localizationpriority: medium +ms.topic: article +ms.date: 04/14/2025 +ms.collection: + - highpri + - tier2 +appliesto: + - ✅ Windows 10, version 22H2 +--- + +# Enable Extended Security Updates (ESU) + \ No newline at end of file From deac59ff62ba462d1618583ababd3f796423a37c Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 11:52:05 -0700 Subject: [PATCH 02/15] esu-enable-10014911 --- .../enable-extended-security-updates.md | 85 ++++++++++++++++++- 1 file changed, 83 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index f3a2ece075..939d56fd8e 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: aaroncz ms.localizationpriority: medium ms.topic: article -ms.date: 04/14/2025 +ms.date: 05/19/2025 ms.collection: - highpri - tier2 @@ -17,4 +17,85 @@ appliesto: --- # Enable Extended Security Updates (ESU) - \ No newline at end of file + +> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. + +The Windows 10 Extended Security Updates (ESU) program allows organizations to receive critical and important security updates for PCs enrolled in the paid subscription service. ESU extends the use of Windows 10 devices past the end of support date on October 14, 2025. This article provides instructions on how to enable the ESU keys in commercial environments. + +## Prerequisites + +To enable ESU for Windows 10, you must meet the following prerequisites: + +**Client operating system:** +- Windows 10, version 22H2 with [KB5046613](https://support.microsoft.com/help/5046613), or a later update installed +- Administrative privileges on the device + +**Endpoints for client activation:** +- https://go.microsoft.com/ +- https://go.microsoft.com/ +- https://login.live.com +- https://activation.sls.microsoft.com/ +- http://crl.microsoft.com/pki/crl/products/MicProSecSerCA_2007-12-04.crl +- https://validation.sls.microsoft.com/ +- https://activation-v2.sls.microsoft.com/ +- https://validation-v2.sls.microsoft.com/ +- https://displaycatalog.mp.microsoft.com/ +- https://licensing.mp.microsoft.com/ +- https://purchase.mp.microsoft.com/ +- https://displaycatalog.md.mp.microsoft.com/ +- https://licensing.md.mp.microsoft.com/ +- https://purchase.md.mp.microsoft.com/ + +**Microsoft 365 admin center:** + +[Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) to the [Microsoft 365 admin center](https://admin.microsoft.com) for volume licensing + +## Get the product keys for activating Extended Security Update (ESU) licenses + +If you bought ESU licenses, you can activate them with Multiple Activation Keys (MAK) that you get from the admin center. To find the ESU license MAK, use the following steps: + +1. In the [admin center](https://admin.microsoft.com), go to the **Billing** > **Your Products** page, then select the Volume licensing tab. +2. In the **Contracts** section, select **View contracts**. +3. On the Contracts page, find the **License ID** that the ESU licenses were purchased under, select the three dots (**More actions**), then select **View product keys**. The **Product keys** details page includes contract details and a list of all keys for that contract. + +> [!NOTE] +> You can order ESU licenses before the start of the ESU coverage period. However, the ESU MAK displayed in the Product keys details panel isn't usable until the defined ESU coverage period begins. For more information, see [Product Lifecycle FAQ - Extended Security Updates](/lifecycle/faq/extended-security-updates). + +## Install and activate the ESU key + +The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see [Activate ESU keys by phone](#activate-esu-keys-by-phone) To install the ESU key on clients, use the following steps: + +1. Open an elevated Command Prompt window on the device. +1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained in the previous section: + + ```cmd + slmgr.vbs /ipk + ``` + After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. + +1. Find the ESU Activation ID using the following table: + | ESU Program | Activation ID | + |---|---| + |Win10 ESU Year1| f520e45e-7413-4a34-a497-d2765967d094 | + |Win10 ESU Year2| 1043add5-23b1-4afb-9a0f-64343c8f3f8d | + |Win10 ESU Year3| 83d49986-add3-41d7-ba33-87c7bfb5c0fb | + + > [!Note] + > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program +1. From the elevated Command Prompt window, run the following command to activate the ESU key, replacing `` with the actual ESU Activation ID you obtained in the previous step: + + ```cmd + slmgr.vbs /ato + ``` + After you run this command, you should see a Windows Script Host dialog box that states the product was activated successfully. +1. To verify that the ESU key is installed and activated, run the following command from an elevated Command Prompt: + + ```cmd + slmgr.vbs /dli + ``` + + The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. + +## Activate ESU keys by phone + +If the device doesn't have access to the internet or to the Microsoft Activation Servers, use the following steps fo a manual phone activation: From a6a57e5d51170ceacb266752c3a34bee829ac1bf Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 12:13:20 -0700 Subject: [PATCH 03/15] esu-enable-10014911 --- .../enable-extended-security-updates.md | 62 ++++++++++++++++++- 1 file changed, 59 insertions(+), 3 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 939d56fd8e..74350778a6 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -71,27 +71,32 @@ The device needs access to the internet and to Microsoft Activation Servers. If ```cmd slmgr.vbs /ipk ``` + After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. 1. Find the ESU Activation ID using the following table: + | ESU Program | Activation ID | |---|---| |Win10 ESU Year1| f520e45e-7413-4a34-a497-d2765967d094 | |Win10 ESU Year2| 1043add5-23b1-4afb-9a0f-64343c8f3f8d | |Win10 ESU Year3| 83d49986-add3-41d7-ba33-87c7bfb5c0fb | - + > [!Note] - > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program + > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. + 1. From the elevated Command Prompt window, run the following command to activate the ESU key, replacing `` with the actual ESU Activation ID you obtained in the previous step: ```cmd slmgr.vbs /ato ``` + After you run this command, you should see a Windows Script Host dialog box that states the product was activated successfully. + 1. To verify that the ESU key is installed and activated, run the following command from an elevated Command Prompt: ```cmd - slmgr.vbs /dli + slmgr.vbs /dlv ``` The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. @@ -99,3 +104,54 @@ The device needs access to the internet and to Microsoft Activation Servers. If ## Activate ESU keys by phone If the device doesn't have access to the internet or to the Microsoft Activation Servers, use the following steps fo a manual phone activation: + +1. Open an elevated Command Prompt window on the device. +1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained in the previous section: + + ```cmd + slmgr.vbs /ipk + ``` + + After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. + +1. To verify that the ESU key is installed, run the following command from an elevated Command Prompt: + + ```cmd + slmgr.vbs /dlv + ``` + +1. Find the ESU Activation ID using the following table: + + | ESU Program | Activation ID | + |---|---| + |Win10 ESU Year1| f520e45e-7413-4a34-a497-d2765967d094 | + |Win10 ESU Year2| 1043add5-23b1-4afb-9a0f-64343c8f3f8d | + |Win10 ESU Year3| 83d49986-add3-41d7-ba33-87c7bfb5c0fb | + + > [!Note] + > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. + +1. Get the **Installation ID (IID)** from the device by run the following command in an elevated Command Prompt, replacing `` with the actual ESU Activation ID you obtained in the previous step: + + ```cmd + slmgr.vbs /dti + ``` + +1. Once you have the **Installation ID**, call the [Microsoft Licensing Activation Center](https://www.microsoft.com/Licensing/existing-customer/activation-centers) for your region. They'll walk you through the steps to get the **Confirmation ID**. Make a note of your **Confirmation ID**. You can also request to receive a text message with a link to a web page where you can look up your **Confirmation ID** by entering the **Installation ID**. The link can only be used for two devices at a time. + +1. From the elevated Command Prompt window, run the following command to activate the ESU key, replacing `` with the actual ESU Activation ID you obtained from the chart and `` with the actual Confirmation ID you received from the Microsoft Licensing Activation Center: + + ```cmd + slmgr.vbs /atp + ``` + + > [!Note] + > The `` shouldn't have spaces in it. + +1. To verify that the ESU key is installed and activated, run the following command from an elevated Command Prompt: + + ```cmd + slmgr.vbs /dlv + ``` + + The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. \ No newline at end of file From fb97866187640bba12dbf95b4de6d72fadbc55ce Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 14:03:20 -0700 Subject: [PATCH 04/15] esu-enable-10014911 --- .../enable-extended-security-updates.md | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 74350778a6..6bd2d4cd88 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -52,7 +52,7 @@ To enable ESU for Windows 10, you must meet the following prerequisites: ## Get the product keys for activating Extended Security Update (ESU) licenses -If you bought ESU licenses, you can activate them with Multiple Activation Keys (MAK) that you get from the admin center. To find the ESU license MAK, use the following steps: +If you bought ESU licenses, you can activate them with Multiple Activation Keys (MAK) that you get from the Microsoft 365 admin center. To find the ESU license MAK, use the following steps: 1. In the [admin center](https://admin.microsoft.com), go to the **Billing** > **Your Products** page, then select the Volume licensing tab. 2. In the **Contracts** section, select **View contracts**. @@ -63,10 +63,10 @@ If you bought ESU licenses, you can activate them with Multiple Activation Keys ## Install and activate the ESU key -The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see [Activate ESU keys by phone](#activate-esu-keys-by-phone) To install the ESU key on clients, use the following steps: +You'll be managing licensing and activation on devices using [slmgr.vbs](/windows-server/get-started/activation-slmgr-vbs-options). The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see [Activate ESU keys by phone](#activate-esu-keys-by-phone). To install the ESU key on clients, use the following steps: 1. Open an elevated Command Prompt window on the device. -1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained in the previous section: +1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained from the Microsoft 365 admin center: ```cmd slmgr.vbs /ipk @@ -105,7 +105,7 @@ The device needs access to the internet and to Microsoft Activation Servers. If If the device doesn't have access to the internet or to the Microsoft Activation Servers, use the following steps fo a manual phone activation: -1. Open an elevated Command Prompt window on the device. +1. Open an elevated Command Prompt window on the device. You'll be managing licensing and activation on devices using [slmgr.vbs](/windows-server/get-started/activation-slmgr-vbs-options). 1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained in the previous section: ```cmd @@ -120,6 +120,9 @@ If the device doesn't have access to the internet or to the Microsoft Activation slmgr.vbs /dlv ``` + > [!Note] + > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. + 1. Find the ESU Activation ID using the following table: | ESU Program | Activation ID | @@ -154,4 +157,9 @@ If the device doesn't have access to the internet or to the Microsoft Activation slmgr.vbs /dlv ``` - The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. \ No newline at end of file + The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. + +## Related content + +- [Slmgr.vbs options](/windows-server/get-started/activation-slmgr-vbs-options) +- [Extended Security Updates (ESU) program for Windows 10](extended-security-updates.md) \ No newline at end of file From 8dfcc7650f30846c4672cd0a38f2bf3a5eb84e07 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 14:11:12 -0700 Subject: [PATCH 05/15] esu-enable-10014911 --- .../enable-extended-security-updates.md | 45 ++++++++----------- 1 file changed, 18 insertions(+), 27 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 6bd2d4cd88..46ed294877 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -31,24 +31,24 @@ To enable ESU for Windows 10, you must meet the following prerequisites: - Administrative privileges on the device **Endpoints for client activation:** -- https://go.microsoft.com/ -- https://go.microsoft.com/ -- https://login.live.com -- https://activation.sls.microsoft.com/ -- http://crl.microsoft.com/pki/crl/products/MicProSecSerCA_2007-12-04.crl -- https://validation.sls.microsoft.com/ -- https://activation-v2.sls.microsoft.com/ -- https://validation-v2.sls.microsoft.com/ -- https://displaycatalog.mp.microsoft.com/ -- https://licensing.mp.microsoft.com/ -- https://purchase.mp.microsoft.com/ -- https://displaycatalog.md.mp.microsoft.com/ -- https://licensing.md.mp.microsoft.com/ -- https://purchase.md.mp.microsoft.com/ +- `https://go.microsoft.com/` +- `https://go.microsoft.com/` +- `https://login.live.com` +- `https://activation.sls.microsoft.com/` +- `http://crl.microsoft.com/pki/crl/products/MicProSecSerCA_2007-12-04.crl` +- `https://validation.sls.microsoft.com/` +- `https://activation-v2.sls.microsoft.com/` +- `https://validation-v2.sls.microsoft.com/` +- `https://displaycatalog.mp.microsoft.com/` +- `https://licensing.mp.microsoft.com/` +- `https://purchase.mp.microsoft.com/` +- `https://displaycatalog.md.mp.microsoft.com/` +- `https://licensing.md.mp.microsoft.com/` +- `https://purchase.md.mp.microsoft.com/` **Microsoft 365 admin center:** -[Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) to the [Microsoft 365 admin center](https://admin.microsoft.com) for volume licensing +[Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) to the [Microsoft 365 admin center](https://admin.microsoft.com). ## Get the product keys for activating Extended Security Update (ESU) licenses @@ -72,8 +72,7 @@ You'll be managing licensing and activation on devices using [slmgr.vbs](/window slmgr.vbs /ipk ``` - After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. - + After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. 1. Find the ESU Activation ID using the following table: | ESU Program | Activation ID | @@ -84,15 +83,13 @@ You'll be managing licensing and activation on devices using [slmgr.vbs](/window > [!Note] > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. - 1. From the elevated Command Prompt window, run the following command to activate the ESU key, replacing `` with the actual ESU Activation ID you obtained in the previous step: ```cmd slmgr.vbs /ato ``` - After you run this command, you should see a Windows Script Host dialog box that states the product was activated successfully. - + After you run this command, you should see a Windows Script Host dialog box that states the product was activated successfully. 1. To verify that the ESU key is installed and activated, run the following command from an elevated Command Prompt: ```cmd @@ -112,8 +109,7 @@ If the device doesn't have access to the internet or to the Microsoft Activation slmgr.vbs /ipk ``` - After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. - + After you run this command, you should see a Windows Script Host dialog box that states the product key was installed successfully. 1. To verify that the ESU key is installed, run the following command from an elevated Command Prompt: ```cmd @@ -122,7 +118,6 @@ If the device doesn't have access to the internet or to the Microsoft Activation > [!Note] > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. - 1. Find the ESU Activation ID using the following table: | ESU Program | Activation ID | @@ -133,15 +128,12 @@ If the device doesn't have access to the internet or to the Microsoft Activation > [!Note] > The activation IDs are the same across all eligible Windows ESU editions and all devices enrolled for that program. - 1. Get the **Installation ID (IID)** from the device by run the following command in an elevated Command Prompt, replacing `` with the actual ESU Activation ID you obtained in the previous step: ```cmd slmgr.vbs /dti ``` - 1. Once you have the **Installation ID**, call the [Microsoft Licensing Activation Center](https://www.microsoft.com/Licensing/existing-customer/activation-centers) for your region. They'll walk you through the steps to get the **Confirmation ID**. Make a note of your **Confirmation ID**. You can also request to receive a text message with a link to a web page where you can look up your **Confirmation ID** by entering the **Installation ID**. The link can only be used for two devices at a time. - 1. From the elevated Command Prompt window, run the following command to activate the ESU key, replacing `` with the actual ESU Activation ID you obtained from the chart and `` with the actual Confirmation ID you received from the Microsoft Licensing Activation Center: ```cmd @@ -150,7 +142,6 @@ If the device doesn't have access to the internet or to the Microsoft Activation > [!Note] > The `` shouldn't have spaces in it. - 1. To verify that the ESU key is installed and activated, run the following command from an elevated Command Prompt: ```cmd From 6dfecdeed2750df28bfcdc9887dfdb86ca5e0d03 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 14:21:18 -0700 Subject: [PATCH 06/15] esu-enable-10014911 --- windows/whats-new/enable-extended-security-updates.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 46ed294877..fdbd155510 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -150,6 +150,12 @@ If the device doesn't have access to the internet or to the Microsoft Activation The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. +### Activate large numbers of devices that don't have internet access + +For more information on how to do manual activation of large numbers of devices, review the Volume Activation Management Tool (VAMT) [Proxy Activation](/windows/deployment/volume-activation/proxy-activation-vamt) scenario. You should install the latest [Automated Deployment Kit (ADK) tool](/windows-hardware/get-started/adk-install) to ensure that the VAMT tool includes updated PkeyConfig files for Windows 10 ESU MAK keys. + +For more information on adding additional activations to a Windows 10 ESU MAK, see [Request an increase to MAK activation limits](/microsoft-365/commerce/licenses/product-keys-for-vl#request-an-increase-to-mak-activation-limits). + ## Related content - [Slmgr.vbs options](/windows-server/get-started/activation-slmgr-vbs-options) From 8851365dd44bcd32041557769720a7b367637d2d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 19 May 2025 14:23:08 -0700 Subject: [PATCH 07/15] esu-enable-10014911 --- windows/whats-new/enable-extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index fdbd155510..6c3cc8fc7a 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: aaroncz ms.localizationpriority: medium ms.topic: article -ms.date: 05/19/2025 +ms.date: 05/20/2025 ms.collection: - highpri - tier2 From ca621bb54a71e6f69f39c395a4b6794a01359ab0 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 10:43:15 -0700 Subject: [PATCH 08/15] esu-enable --- windows/whats-new/enable-extended-security-updates.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 6c3cc8fc7a..2aa9663dfa 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: aaroncz ms.localizationpriority: medium ms.topic: article -ms.date: 05/20/2025 +ms.date: 05/21/2025 ms.collection: - highpri - tier2 @@ -35,7 +35,7 @@ To enable ESU for Windows 10, you must meet the following prerequisites: - `https://go.microsoft.com/` - `https://login.live.com` - `https://activation.sls.microsoft.com/` -- `http://crl.microsoft.com/pki/crl/products/MicProSecSerCA_2007-12-04.crl` +- `http://crl.microsoft.com/` - `https://validation.sls.microsoft.com/` - `https://activation-v2.sls.microsoft.com/` - `https://validation-v2.sls.microsoft.com/` @@ -48,7 +48,7 @@ To enable ESU for Windows 10, you must meet the following prerequisites: **Microsoft 365 admin center:** -[Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) to the [Microsoft 365 admin center](https://admin.microsoft.com). +- [Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) in the [Microsoft 365 admin center](https://admin.microsoft.com) ## Get the product keys for activating Extended Security Update (ESU) licenses @@ -63,7 +63,7 @@ If you bought ESU licenses, you can activate them with Multiple Activation Keys ## Install and activate the ESU key -You'll be managing licensing and activation on devices using [slmgr.vbs](/windows-server/get-started/activation-slmgr-vbs-options). The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see [Activate ESU keys by phone](#activate-esu-keys-by-phone). To install the ESU key on clients, use the following steps: +You manage licensing and activation on devices using [slmgr.vbs](/windows-server/get-started/activation-slmgr-vbs-options). The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see [Activate ESU keys by phone](#activate-esu-keys-by-phone). To install the ESU key on clients, use the following steps: 1. Open an elevated Command Prompt window on the device. 1. Run the following command to install the ESU key, replacing `` with the actual ESU MAK you obtained from the Microsoft 365 admin center: From 36847d9918d34b34b9e575fa70163fe55d0b8791 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 10:44:44 -0700 Subject: [PATCH 09/15] esu-enable --- windows/whats-new/extended-security-updates.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index 83a35c5d27..de90bf1037 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -17,14 +17,13 @@ appliesto: --- # Extended Security Updates (ESU) program for Windows 10 - +> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. + The Windows 10 Extended Security Updates (ESU) program gives customers the option to receive security updates for PCs enrolled in the program. ESU is a paid program that provides individuals and organizations of all sizes with the option to extend the use of Windows 10 devices past the end of support date in a more secure manner. For more information about the Windows 10 lifecycle, see the [Windows Lifecycle FAQ](/lifecycle/faq/windows). Individuals or organizations who elect to continue using Windows 10 after support ends on October 14, 2025, will have the option of enrolling their PCs into a paid ESU subscription. The ESU program enables PCs to continue to receive critical and important security updates through an annual subscription service after support ends. The [Microsoft Security Response Center](https://msrc.microsoft.com/) defines the [severity rating for security updates](https://www.microsoft.com/msrc/security-update-severity-rating-system). -> [!Note] -> Looking for consumer information? For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. ## Device prerequisites From 4424f07c3bc28cb35e2e15e622584dba17694e5d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 10:45:14 -0700 Subject: [PATCH 10/15] esu-enable --- windows/whats-new/extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index de90bf1037..6c652ed7a3 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: aaroncz ms.localizationpriority: medium ms.topic: article -ms.date: 04/14/2025 +ms.date: 05/21/2025 ms.collection: - highpri - tier2 From d4b8e680f2240433892186ecdf9b708ec7923ced Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 11:24:51 -0700 Subject: [PATCH 11/15] esu-enable --- windows/whats-new/enable-extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 2aa9663dfa..aaf241434a 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -18,7 +18,7 @@ appliesto: # Enable Extended Security Updates (ESU) -> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. +> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. The Windows 10 Extended Security Updates (ESU) program allows organizations to receive critical and important security updates for PCs enrolled in the paid subscription service. ESU extends the use of Windows 10 devices past the end of support date on October 14, 2025. This article provides instructions on how to enable the ESU keys in commercial environments. From 78bc0abc0e90a3adec74d764e3068c6e7d25b84a Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 11:49:08 -0700 Subject: [PATCH 12/15] esu-enable --- windows/whats-new/enable-extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index aaf241434a..103d6c831b 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -150,7 +150,7 @@ If the device doesn't have access to the internet or to the Microsoft Activation The output should show the **Name** of the corresponding ESU program and the **License Status** as `Licensed` for that program. -### Activate large numbers of devices that don't have internet access +## Activate large numbers of devices that don't have internet access For more information on how to do manual activation of large numbers of devices, review the Volume Activation Management Tool (VAMT) [Proxy Activation](/windows/deployment/volume-activation/proxy-activation-vamt) scenario. You should install the latest [Automated Deployment Kit (ADK) tool](/windows-hardware/get-started/adk-install) to ensure that the VAMT tool includes updated PkeyConfig files for Windows 10 ESU MAK keys. From 010cecd8dd072986f8991bbceb585c36a22bf76f Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 11:50:24 -0700 Subject: [PATCH 13/15] esu-enable --- windows/whats-new/enable-extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 103d6c831b..38beaa6486 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -20,7 +20,7 @@ appliesto: > **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. -The Windows 10 Extended Security Updates (ESU) program allows organizations to receive critical and important security updates for PCs enrolled in the paid subscription service. ESU extends the use of Windows 10 devices past the end of support date on October 14, 2025. This article provides instructions on how to enable the ESU keys in commercial environments. +The [Windows 10 Extended Security Updates (ESU) program](extended-security-updates.md) allows organizations to receive critical and important security updates for PCs enrolled in the paid subscription service. ESU extends the use of Windows 10 devices past the end of support date on October 14, 2025. This article provides instructions on how to enable the ESU keys in commercial environments. ## Prerequisites From eba3857f6eb2f14ba05af9735e4f00fa89166d3d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 14:30:38 -0700 Subject: [PATCH 14/15] esu-enable --- windows/whats-new/extended-security-updates.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index 6c652ed7a3..625dfb8e21 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -27,7 +27,7 @@ Individuals or organizations who elect to continue using Windows 10 after suppor ## Device prerequisites -To be eligible to install updates from the ESU program, devices must be running Windows 10, version 22H2. +To be eligible to install updates from the ESU program, devices must be running Windows 10, version 22H2. For more information on prerequisites and enabling ESU in commercial environments, see [Enable Extended Security Updates (ESU)](enable-extended-security-updates.md). ## Limitations @@ -91,3 +91,7 @@ Windows 10 PCs will continue to work, but we recommend customers upgrade eligibl - Technical support - Feature updates or new features - Quality updates (including security and reliability fixes) + +## Related content + +For more information about enabling ESU in commercial environments, see [Enable Extended Security Updates (ESU)](enable-extended-security-updates.md). From f800cda30a26f65b7348036657e7e001119ae509 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 21 May 2025 14:35:23 -0700 Subject: [PATCH 15/15] esu-enable --- windows/whats-new/extended-security-updates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index 625dfb8e21..8bacc05a7c 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -65,11 +65,11 @@ For individuals or Windows 10 Home customers, Extended Security Updates for Wind ### Is there a minimum license purchase requirement for Windows 10 ESU? -The minimum license purchase requirements for Windows 10 ESU is one license. +The minimum license purchase requirement for Windows 10 ESU is one license. ### Can ESUs be purchased for a specific duration? -The Extended Security Update Program for Windows 10 must be purchased by year. Customers can't buy partial periods, for instance, only six months. Year One starts in November 2025. If you decide to purchase the program in Year Two, you'll have to pay for Year One too, as ESUs are cumulative. +The Extended Security Update Program for Windows 10 must be purchased by year. Customers can't buy partial periods, for instance, only six months. Year One starts in November 2025. If you decide to purchase the program in Year Two, you have to pay for Year One too, as ESUs are cumulative. ### When will the ESU offer be available for licensing?