WIXLIB

4. What editions of SQL Server and Windows Server 2008/2008 R2 are eligible for Extended SecurityUpdates?The Enterprise, Datacenter, Standard, Web, and Workgroup editions of SQL Server 2008/2008 R2 and theDatacenter, Enterprise, and Standard editions of Windows Server 2008/2008 R2 are eligible for Extended SecurityUpdates, for both x86 and x64 versions.5. When will the Extended Security Updates offer be available?In Azure: Customers can begin migrating workloads to Azure Virtual Machines immediately and apply regularsecurity updates until the End of Support date, at which time Extended Security Updates will become available,ensuring continuous coverage.On-premises or hosted environments: Extended Security Updates are now available for purchase and can beordered from Microsoft or a Microsoft licensing partner. The delivery of Extended Security Updates will begin afterthe End of Support dates, if and when available.6. What do Extended Security Updates include?For SQL Server 2008 and 2008 R2: Extended Security Updates include provision of Security Updates and Bulletinsrated “critical” for a maximum of three years after July 9, 2019.For Windows Server 2008 and 2008 R2: Extended Security Updates include provision of Security Updates andBulletins rated “critical” and “important,” for a maximum of three years after January 14, 2020.Extended Security Updates will be distributed if and when available. Extended Security Updates do not includetechnical support, but you may use other Microsoft support plans to get assistance on your Server 2008 and 2008R2 questions on workloads covered by Extended Security Updates.Extended Security Updates do not include new features, customer-requested non-security hotfixes, or designchange requests. However, Microsoft may include non-security fixes as deemed necessary.There is no retroactive effect for any update that the engineering teams declined in the past.For more information on what is considered “critical” or “important,” please visit the MSRC site.7. Why do Extended Security Updates for SQL Server 2008/R2 only offer “critical” updates?For End of Support events in the past, SQL Server provided only Critical Security Updates, which meets thecompliance criteria of our enterprise customers. SQL Server does not ship a general monthly security update.Microsoft only provides on-demand SQL Server security updates (GDRs) for MSRC bulletins where SQL Server isidentified as an affected product.If there are situations where new SQL Server important updates will not be provided and it is deemed critical bythe customer but not by MSRC, we will work with the customer on a case-to-case basis to suggest appropriatemitigation.8. What Licensing programs are eligible for Extended Security Updates?Software Assurance customers can purchase Extended Security Updates on-premises under an EnterpriseAgreement (EA), Enterprise Subscription Agreement (EAS), a Server & Cloud Enrollment (SCE), or an Enrollment forEducation Solutions (EES). Software Assurance does not need to be on the same enrollment.5August 2019 2019 Microsoft Corporation. All rights reserved. This document is for informational purposes only. Microsoft makes no warranties express orimplied, with respect to the information presented here.

9. Are customers required to cover all on-premises servers with active Software Assurance to getExtended Security Updates on-premises?No, customers can choose to cover as many 2008 on-premises servers with Software Assurance as they need forExtended Security Updates.10. How much will Extended Security Updates cost for Windows Server and SQL Server 2008 and 2008 R2?In Azure: Customers running Windows Server or SQL Server 2008 and 2008 R2 in an Azure Virtual Machine will getExtended Security Updates for no additional charges above the cost of running the virtual machine. Customersmoving to Azure SQL Database Managed Instance (PaaS) do not need Extended Security Updates, as this is a fullymanaged solution, and is always updated and patched by Microsoft.On-Premises: Customers with active Software Assurance or subscription licenses can purchase Extended SecurityUpdates for approximately 75% of the on-premises license cost annually. Pricing is available on published pricelists. Contact your Microsoft partner or account team for more details.Hosted environments: Customers who license Windows Server or SQL Server 2008 or 2008 R2 through anauthorized SPLA hoster will need to separately purchase Extended Security Updates under an Enterprise or Serverand Cloud Enrollment either directly from Microsoft for approximately 75% of the full on-premises license costannually or from their Microsoft reseller for use in the hosted environment. The price of Extended SecurityUpdates acquired through Microsoft resellers is set by the reseller. Pricing for Windows Server Extended SecurityUpdates is based on Windows Server Standard per core pricing, based on the number of virtual cores in thehosted virtual machine, and subject to a minimum of 16 licenses per instance. Pricing for SQL Server ExtendedSecurity Updates is based on SQL Server per core pricing, based on the number of virtual cores in the hostedvirtual machine, and subject to a minimum of 4 licenses per instance. Software Assurance is not required. Contactyour Microsoft reseller or account team for more details.11. If a SQL Server 2008/R2 customer with Software Assurance purchased a number of cores for their onpremises environment, and is using Software Assurance to have a secondary passive server (e.g. forfail-over support) with the same number of cores, how can they calculate the price of ExtendedSecurity Updates?The price of Extended Security Updates will be calculated based on the number of cores licensed for a customer’son-premises environment. If they licensed 8 cores for SQL Server on-premises and use Software Assurancebenefits to have a secondary passive server of 8 cores, that customer will purchase Extended Security Updatesbased on the 8 cores for SQL Server. Customers can then apply updates to their licensed virtual machined,including the secondary passive server.12. Can customers buy Extended Security Updates for SQL Server 2008 R2 Express or Developer Edition?No. Customers cannot buy Extended Security Updates for SQL Server 2008 R2 Express or Developer Edition.However, they can move their workloads to Azure and get the Extended Security Updates for no additionalcharges above the cost of using the Azure service. Also, customers who have Extended Security Updates for SQLServer production workloads are permitted to apply updates to their servers running SQL Server Developer Editionsolely for development and test purposes.6August 2019 2019 Microsoft Corporation. All rights reserved. This document is for informational purposes only. Microsoft makes no warranties express orimplied, with respect to the information presented here.

13. What are the details for the Extended Security Updates offer on-premises? Customers with active Software Assurance or subscription licenses for their servers are eligible topurchase Extended Security Updates on-premises through an EA, EAS, SCE, or EES. Customers can choose which servers to be covered. Customers with Software Assurance through other enrollments (e.g. Open, Select, MPSA) can useExtended Security Updates purchased through EA, EAS, SCE, or EES. Prices will remain the same for years 1, 2, and 3. Pricing for Extended Security Updates will follow the current license model for the server. For example,Windows Server is licensed by core and is required for all physical cores on each server. Extended Security Updates pricing is approximately 75% (annually) of the EA or SCE license prices of thelatest version of SQL Server or Windows Server. Consult the published price lists or your reseller for actualprices. Coverage will be available in three consecutive 12-month increments following End of Support. Customers cannot buy partial periods (e.g. only 6 months). The customer’s EA renewal does not need toalign to the Extended Security Update annual period. EA and ESU must overlap for at least one month atthe beginning of each year of Extended Security Update coverage. Customers must have active Software Assurance coverage or subscription licenses for at least one monthat the start of each coverage period in order to be eligible for Extended Security Updates in that period.For example, customers must have Software Assurance coverage for SQL Server during the month of July2019 in order to be eligible for Extended Security Updates for SQL Server during the first year of ExtendedSecurity Updates coverage. If customers purchase Extended Security Updates while Software Assurance is active, but SoftwareAssurance lapses before the Extended Security Update coverage begins, customers will not be able toreceive updates. Extended Security Updates are available annually, for a fixed 12-month period. If a customer purchasesExtended Security Updates in month 10 of the 12-month period, that customer would still need topurchase the full 12 months. Customers must have purchased coverage for year 1 of Extended Security Updates in order to buy year 2,and coverage in year 2 in order to buy year 3. Customers may buy coverage for previous years at thesame time they buy coverage for a current period. It is not necessary to buy a certain period of coveragewithin that coverage period. Premier Support is not a base requirement, but an additional support contract is recommended iftechnical support will be required.14. Do I need Software Assurance on my CALs to access servers covered by Extended Security Updates?Yes, customers must have active Software Assurance (or equivalent Subscription Licenses) for CALs and ExternalConnector Licenses permitting access to Servers with active Extended Security Updates coverage. However,Extended Security Updates coverage is neither required nor available for CALs or External Connector Licenses.7August 2019 2019 Microsoft Corporation. All rights reserved. This document is for informational purposes only. Microsoft makes no warranties express orimplied, with respect to the information presented here.

15. Can customers license just the virtual machine? For example, if a customer is running a Windows Server2008 or 2008 R2 virtual machine on Windows Server 2012 or another host, do they need ExtendedSecurity Updates for the full server? What if the host is running Windows Server 2008 or 2008 R2, butnone of the virtual machines are?Customers cannot license individual Windows Server virtual machines. They must license the full physical server.Licensing requirements for Extended Security Updates on-premises align to the licensing requirements for theunderlying Software Assurance coverage or subscription. Customers will only need to know their Windows Serverlicense position for a given server, to know how many Extended Security Update licenses they need. Customers who have covered all the underlying cores of the physical server with Windows ServerDatacenter licenses should buy Extended Security Updates for the number of physical cores, irrespectiveof the number of VMs running on that physical server.Customers who have covered all the underlying cores of the physical server with Windows ServerStandard licenses should buy Extended Security Updates for the number of physical cores, but will only belicensed to run and update two virtual machines on the server. Customers who wish to run and updatemore than two virtual machines on a server licensed with Windows Server Standard must re-license all ofthe physical cores on the server with both Windows Server Standard and Extended Security Updates foreach additional pair of virtual machines.16. Do SQL Server or Windows Server 2008 and 2008 R2 customers need to be running the most currentService Pack to benefit from Extended Security Updates?Yes, customers with SQL Server or Windows Server 2008 and 2008 R2 must run the latest Service Pack to applyExtended Security Updates. Microsoft will only produce updates which can be applied on the latest Service Pack.Here are the links to the latest service packs:Windows Server 2008 R2Windows Server 2008SQL Server 2008 R2SQL Server 200817. Is Software Assurance required to take advantage of Extended Security Updates?Software Assurance or an equivalent Server Subscription is required for customers to purchase Extended SecurityUpdates on-premises.On Azure, customers do not need Software Assurance to get free Extended Security Updates, but SoftwareAssurance or Server Subscription is required to take advantage of the Azure Hybrid Benefit.18. What are the options for SQL Server and Windows Server 2008 and 2008 R2 customers withoutSoftware Assurance?For customers who do not have Software Assurance, the alternative option to get access to Extended SecurityUpdates is to migrate to Azure. For variable workloads, we recommend that customers migrate on Azure via PayAs-You-Go, which allows for scaling u

1. When are the End of Support dates for SQL Server and Windows Server 2008 and 2008 R2? The End of Support date for SQL Server 2008 and 2008 R2 is July 9, 2019. The End of Support date for Windows Server 2008 and 2008 R2 is January 14, 2020. 2. What does End of Support mean?