Community
 
 
 

Radia - General Discussions

1331 followers
 
Avatar
Jim Longo

Windows 7/Windows Server 2008 (R2) Extended security patching using Radia Patch Manager

 On January 14th, 2020, Microsoft will end regular support for Windows 7, Windows Server 2008 and Windows Server 2008 R2. In order to continue patching Windows 7 and Windows Server 2008 and Windows Server 2008 R2 an extended support contract with Microsoft is needed. 

 Depending on the delivery mechanism Microsoft uses there may not be a need to use custom XML descriptor files to patch these OS's. Microsoft has released a hotfix for extended support for these OS's and the patches may be delivered through the existing MUC data feed and wsusscn2.cab file. In that scenario Radia Patch Manager can continue to be used to distribute security updates. 

 If however Microsoft uses the same delivery mechanism as the Windows XP/2003 Server updates then custom XML descriptor files will be needed to continue patching these OS's via Radia.

 For those who will be extending security patch support with Microsoft and require custom XML descriptor file support to continue to distribute the security patches via Radia Patch Manager, please open a case with our support department requesting details about our XML descriptor file program to manage out of support Windows Operating Systems.

 Once we have the details about how Microsoft will be delivering the security updates we will update this post with more information.

 

4 comments
0

Please sign in to leave a comment.

 
 

Previous 4 comments

Avatar
Jim Longo

 Microsoft has released a hotfix for Windows 7 extended security patch support so perhaps the MUC feed will continue to host the Windows 7 security updates. As long as the wsusscn2.cab file contains the Windows 7/2K8 security patches each month there will not be a need for extended Windows 7 custom XML support. It depends on how Microsoft releases the extended security patches. 

 

https://support.microsoft.com/en-us/help/4528069/update-for-eligible-windows-7-and-server-2008-r2-devices-can-get-esu

Comment actions Permalink
Avatar
Jim Longo

For Extended Security Patching, please review the following information and ensure all prerequisite kb numbers are installed for Extended Security Updates on Windows 7 and Windows 2008 Servers. let us know if you have any questions. 

https://support.microsoft.com/en-us/help/4528069/update-for-eligible-windows-7-and-server-2008-r2-devices-can-get-esu

Prerequisites

You must have the following installed on your on-premise device before you apply this update: 

  1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU update:
    • 4474419 SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019
    • 4490628 Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019
  2. Install the following servicing stack update (SSU) and monthly rollup:
    • 4516655 Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019
    • 4519976 October 8, 2019—KB4519976 (Monthly Rollup)
  3. Install and activate the ESU key. For information about how to install and activate the ESU key, see the How to get Extended Security Updates for eligible Windows devices blog on the Microsoft Tech Community website.

    Note After activation, you can then continue to use your current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), or whichever update management solution that you prefer.  
Comment actions Permalink
Avatar
Jim Longo

I was able to successfully acquire the Windows 7 security only update a few minutes ago via Radia Patch Manager(MS-KB4537813). Those with the ESU key should have no issues continuing to acquire and distribute win7 and Win2K8 Server security updates. 

Comment actions Permalink
Avatar
Jim Longo

Microsoft has released an new prerequisite KB number for ESU licensing in February 2020. please ensure you have acquired and distributed the latest ESU KB number in order to continue patching Windows 7 and 2008 Server. 

KB4538483

The Extended Security Updates (ESU) Licensing Preparation Package (KB4538483) released February 11, 2020. The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.

This update provides the complete set of licensing changes to enable installation of the ESU MAK add-on key, which is one of the steps to prepare for installation of Extended Security Updates. For the full set of steps, please see KB4522133

https://support.microsoft.com/en-us/help/4538483/extended-security-updates-esu-licensing-preparation-package

Comment actions Permalink

Top Contributors