Frequently asked questions about ESU for Windows Server and SQL Server 2008 and 2008 R2

• The End of Support date for SQL Server 2008 and 2008 R2 was July 9, 2019.
• The End of Support date for Windows Server 2008 and 2008 R2 is January 14, 2020.

No. However, customers can use an active support contract such as Software Assurance or Premier/Unified Support on the relevant on-premises products to get technical support if they choose to stay on-premises. Alternatively, if they are hosting on Azure, customers can use an Azure Support plan to get technical support.

ESU for Windows Server and SQL Server 2008 and 2008 R2 are offered on Azure Virtual Machines at no additional charge above the cost of the virtual machine. For customers who migrate workloads to Azure Virtual Machines, we offer security updates and bulletins that are rated as “critical” and “important” for Windows Server 2008 and 2008 R2, and rated as “critical” for SQL Server 2008 and 2008 R2.

• Windows Server 2008/R2 instance that is running on-premises: Delivery of ESU for Windows Server is no different than what customers have been seeing for the last decade for security updates. ESU are only security updates.  Customers can install ESU using the tools and processes that they are using currently. The only difference is that the system must be unlocked for the updates to install.
  
  On-premises customers who purchase ESU receive an add-on key to activate ESU by using the volume licensing portal (VLSC). Alternatively, these customers can go to the Azure portal to download ESU. Before customers deploy and activate the downloaded keys, they have to install the prerequisite packages (or any later SSUs or rollups), as described in our IT Pro Blog. That article also provides specific Knowledge Base information.
  
  Customers can deploy the new ESU key and any prerequisite servicing stack updates to the applicable computers, and then continue to use their current update servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), or whatever update management solution the customer prefers. This is also the process that customers have to follow for Azure Stack.
  
  ESU keys can be activated now, and they add the ability to receive ESU. They do not replace the current product activation key (such as OEM or KMS keys), nor do they reactivate the system. Customers have to install a new ESU key each year that they deploy ESU.
  
  For detailed instructions about how to purchase and activate ESU (for both Windows Server 2008 and 2008 R2 and Windows 7), see How to get Extended Security Updates for eligible Windows devices.
• Windows Server 2008 and 2008 R2 instance that is running on Azure Virtual Machines: Azure automatically detects the 2008/R2 VM that is running on Azure, and uses Windows Update or whatever update management solution the customer is using to download and install ESU. Fully updated Windows Server 2008 R2 images are also available from the Azure gallery.
• SQL Server 2008 and 2008 R2 that is running on Windows Server 2008 and 2008 R2 on Azure Virtual Machines: Customers automatically receive updates that MSRC rates as “critical” through existing SQL Server update channels whenever vulnerabilities are found. If an Azure virtual machine is not configured to receive automatic updates, the on-premises download option applies. For more information about SQL Server ESU, see What are Extended Security Updates for SQL Server? For more information about automatic updates, see Manage updates and patches for your Azure VMs.
• SQL Server 2008 and 2008 R2 that is running on Windows Server 2008 and 2008 R2 on-premises: Customers who buy ESU can register the eligible instances and download updates from the Azure portal to deploy to their on-premises environment whenever MSRC issues "critical" updates. Customers also have to follow this process for Azure Stack. For more information about automatic updates, see Manage updates and patches for your Azure VMs.

Microsoft recommends that customers apply ESU patches as soon as they are available to keep their environment protected. For specific questions about update channels and the instance registration and download process, please contact your Microsoft Technical Account Manager or Support resource.

The Azure Hybrid Benefit for SQL Server lets customers use their existing licenses to reduce the cost of Azure Virtual Machines service rates. Customers who have Software Assurance can use the Azure Hybrid Benefit to pay a reduced base rate for SQL Database vCore-based options (such as Managed Instance, vCore-based Single Database, and vCore-based Elastic Pool), SQL Server in Azure Virtual Machines, and SQL Server Integration Services (SSIS). You can apply this benefit even if the SKU is active. However, notice that the base rate will be applied from the time that you select it in the portal. No credit will be issued retroactively.

For more information, see Azure Hybrid Benefit and Azure Hybrid Benefit FAQ.