Update 06.11.2020: Microsoft activation link updated.
Update 03.12.2020: Before installing and activating ESU keys, please ensure you have installed all prerequisites outlined under Prerequisite For Deploying ESU below.
- Introduction
- Prerequisite For Deploying ESU
- The Windows 7 ESU Activation ID
- How To Install And Activate The Windows 7 Extended Security Update MAK Key On Internet Connected Computers
- How To Install And Activate The Windows 7 Extended Security Update MAK Key On Air-Gapped Computers
- Conclusion
Introduction
Announced by Microsoft on March 12, on January 14, 2020, Windows 7 and Windows Server 2008/2008 R2 will go out of support, and soon thereafter Office 2010. Out of support means that there will no longer be any development or security patches released for these operating systems.
If you have not yet updated to a modern operating system and still want security patches, you will need to sign up for these through the Extended Security Updates (ESUs) program.
In this blog post, I cover the prerequisite and how to deploy and activate Windows 7 ESU license on both internet connected computers and air-gaped computers. Note, the assumption is you already obtained and purchased a Windows 7/Windows Server 2008/2008 R2 Extended Security Updates MAK key.
Prerequisite For Deploying ESU
To deploy the Windows 7 ESU you will need the following prerequisite on your clients/servers:
- Install the following SHA-2 code signing support update and the following servicing stack update (SSU):
- Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1:
Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019 (KB4490628)
and
SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019 (KB4474419)
- Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1:
- Windows Server
2008 Service Pack 2 (SP2):
Servicing stack update for Windows Server 2008 SP2: April 9, 2019 (KB4493730)
and
SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019 (KB4474419)
- Windows Server
2008 Service Pack 2 (SP2):
- Install the SSU listed below (or a later SSU) and the ESU licensing preparation package:
- Windows 7 SP1 and Windows Server 2008 R2 SP1
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: February 11, 2020 (KB4537829) or later
and
Extended Security Updates (ESU) Licensing Preparation Package (KB4538483)
- Windows 7 SP1 and Windows Server 2008 R2 SP1
- Windows Server 2008 SP2:
Servicing stack update for Windows Server 2008 SP2: February 11, 2020 (KB4537830) or later
and
Extended Security Updates (ESU) Licensing Preparation Package (KB4538484)
- Windows Server 2008 SP2:
The Windows 7 ESU Activation ID
The Activation IDs are provided by Microsoft on: //techcommunity.microsoft.com/t5/windows-it-pro-blog/how-to-get-extended-security-updates-for-eligible-windows/ba-p/917807
ESU Program | ESU SKU (or Activation) ID |
Windows 7 SP1 (Client) | |
Year 1 | 77db037b-95c3-48d7-a3ab-a9c6d41093e0 |
Year 2 | 0e00c25d-8795-4fb7-9572-3803d91b6880 |
Year 3 | 4220f546-f522-46df-8202-4d07afd26454 |
Windows Server 2008/R2 (Server) | |
Year 1 | 553673ed-6ddf-419c-a153-b760283472fd |
Year 2 | 04fa0286-fa74-401e-bbe9-fbfbb158010d |
Year 3 | 16c08c85-0c8b-4009-9b2b-f1f7319e45f9 |
How To Install And Activate The Windows 7 Extended Security Update MAK Key On Internet Connected Computers
After you have purchased the Windows 7 ESUs, you will receive a MAK key. This MAK is unique to your organization, but not unique for each devices, which means you will use the same MAK key to activate all of your devices.
Execute the following commands in a Elevated Command Prompt:
- cscript c:\windows\system32\slmgr.vbs /ipk <MAK Key>
- cscript slmgr.vbs /dlv *Note, take note of the Activation ID which should also be listed in the above chart
- cscript c:\windows\system32\slmgr.vbs /ato <Activation ID>
- slmgr.vbs /dli hit enter (You should now see ESU status is
Licensed)
How To Install And Activate The Windows 7 Extended Security Update MAK Key On Air-Gapped Computers
Execute the following commands in a Elevated Command Prompt:
- slmgr.vbs /ipk <MAK Key>
- cscript slmgr.vbs /dlv *Note, take note of the Activation and Installation ID (Do not close this command prompt window)
- Call MS: 1-888-725-1047 and provide the Installation ID. MS will provide you with the Confirmation ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx, write it down
- slmgr.vbs /atp <ConfirmationID> space <ActivationID>
- slmgr.vbs /dli hit enter (You should now see ESU status is Licensed)
Conclusion
It is important to ensure your organization has a strategy in place for Windows 7 and Server 2008/2008 R2 upgrade. In the meantime its highly recommended you obtain a ESU license to ensure your operating system is kept protected. Contact us today to order your ESU license’s to stay protected!
Is your organization purchasing ESUs license? How are you handling the Windows 7/Server 2008 and or Server 2008 R2 end of support?
Please leave a comment below!
ITsPaul is a managed service provider located in Ottawa, Ontario. We provide IT support, services and offer Web development.