Security patches windows server 2008

See supported upgrade paths for Windows Server , for more information about your on-premises upgrade options. If you are running Windows Server , you will need to upgrade to Windows Server See upgrade paths for Windows Server for more information about your on-premises upgrade options. In Azure you'll stay compliant, become more secure, and add cloud innovation to your work.

The benefits of migrating to Azure include:. Windows Server Service Pack 2 More Release Date:. Need more help? Expand your skills. Get new features first. Was this information helpful? Yes No. Thank you! Any more feedback? A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. Details Version:. File Name:. Date Published:. Those that decide to move to Azure SQL Managed Instance PaaS will also have access to continuous security updates, as this is a fully managed solution.

These customers will also have access to Extended Security Updates on Azure for no additional charges above the cost of running the virtual machine. Extended Security Updates for on-premises or hosted environments: Extended Security Updates will also be available for workloads running on-premises or in a hosting environment such as with another cloud provider. Product licenses and Software Assurance do not need to reside on the same enrollment. Customers can purchase Extended Security Updates only for the servers they need to cover.

Extended Security Updates can be purchased directly from Microsoft or a Microsoft licensing partner. In Azure: Customers can begin migrating workloads to Azure Virtual Machines immediately and apply regular security updates until the End of Support date.

You don't need to configure anything, and there's no additional charge for using Extended Security Updates with Azure Virtual Machines. Extended Security Updates are available to purchase typically 3 months prior to End of Support dates with delivery of Extended Security Updates beginning after End of Support.

You can find more information about how to use Extended Security Updates here. Extended Security Updates will be distributed if and when available. SQL Server does not ship a general monthly security update. If there are situations where new SQL Server important updates will not be provided and it is deemed critical by the customer but not by MSRC, we will work with the customer on a case-to-case basis to suggest appropriate mitigation.

Software Assurance does not need to be on the same enrollment. Pricing is available on published price lists. Contact your Microsoft partner or account team for more details. The price of Extended Security Updates acquired through Microsoft resellers is set by the reseller. Pricing for Windows Server Extended Security Updates is based on Windows Server Standard per core pricing, based on the number of virtual cores in the hosted virtual machine, and subject to a minimum of 16 licenses per instance.

Pricing for SQL Server Extended Security Updates is based on SQL Server per core pricing, based on the number of virtual cores in the hosted virtual machine, and subject to a minimum of 4 licenses per instance.

Software Assurance is not required. Contact your Microsoft reseller or account team for more details. If they licensed 8 cores for SQL Server on-premises and use Software Assurance benefits to have a secondary passive server i. Customers can then apply updates to their production workload on-premises and the secondary passive server i.

On—premises: Yes, Software Assurance is required for on-premises workloads. Azure Hybrid Benefit—hybrid cloud Microsoft Azure. However, they can move their workloads to Azure and get the Extended Security Updates for no additional charges above the cost of using the Azure service. Customers with Software Assurance through other enrollments e. Pricing for Extended Security Updates will follow the current license model for the server. For example, Windows Server is licensed by core and is required for all physical cores on each server.

Customers cannot buy partial periods e. EA and Extended Security Updates must overlap for at least one month at the beginning of each year of Extended Security Updates coverage. Customers must have active Software Assurance coverage or subscription licenses for at least one month at the start of each coverage period in order to be eligible for Extended Security Updates in that period. If customers purchase Extended Security Updates while Software Assurance is active, but Software Assurance lapses before the Extended Security Update coverage period begins, customers will not be able to receive updates.

Extended Security Updates are available annually, for a fixed month period. If a customer purchases Extended Security Updates in month 10 of the month period, that customer would still need to purchase the full 12 months. Customers must have purchased coverage for year 1 of Extended Security Updates in order to buy year 2, and coverage in year 2 in order to buy year 3.

Customers may buy coverage for previous years at the same time they buy coverage for a current period. It is not necessary to buy a certain period of coverage within that coverage period. Premier Support is not a base requirement, but an additional support contract is recommended if technical support will be required. Core licenses are sold in packs of two a 2-pack of Core Licenses , and packs of 16 a pack of Core Licenses. Each processor needs to be licensed with a minimum of eight cores four 2-pack Core Licenses.

Each physical server, including single-processor servers, will need to be licensed with a minimum of 16 Core Licenses eight 2-pack of Core Licenses or one pack of Core Licenses. Additional cores can then be licensed in increments of two cores one 2-pack of Core Licenses for servers with core densities higher than 8. Customers cannot license individual Windows Server virtual machines. They must license the full physical server. Licensing requirements for Extended Security Updates on-premises align to the licensing requirements for the underlying Software Assurance coverage or subscription.

Customers will only need to know their Windows Server license position for a given server, to know how many Extended Security Update licenses they need. Customers who have covered all the underlying cores of the physical server with Windows Server Datacenter licenses should buy Extended Security Updates for the number of physical cores, irrespective of the number of VMs running on that physical server.

Customers who have covered all the underlying cores of the physical server with Windows Server Standard licenses should buy Extended Security Updates for the number of physical cores, but will only be licensed to run and update two virtual machines on the server. Customers who wish to run and update more than two virtual machines on a server licensed with Windows Server Standard must re-license all of the physical cores on the server with both Windows Server Standard and Extended Security Updates for each additional pair of virtual machines.

Microsoft will only produce updates which can be applied on the latest Service Pack. For customers who do not have Software Assurance, the alternative option to get access to Extended Security Updates is to migrate to Azure. For variable workloads, we recommend that customers migrate on Azure via Pay-As-You-Go, which allows for scaling up or down at any time.