Edit

Extended security updates (ESUs) for SQL Server on Azure Virtual Machines

Applies to: SQL Server on Azure VM

This article describes how you can receive Extended Security Updates (ESUs) for SQL Server on Azure VM workloads.

Both SQL Server 2014 (12.x) and SQL Server 2016 (13.x) have reached the end of their life cycle:

Changes to SQL Server 2016 ESUs

Starting with SQL Server 2016 (13.x), ESUs are available through a paid subscription. Migrating to SQL Server on Azure VMs no longer provides free access to ESUs for SQL Server 2016 (13.x) instances.

While ESUs for SQL Server 2014 VMs remain free of charge, the ESU subscription process is the same for every version of SQL Server.

Tip

Alternatively, upgrade your workload to SQL Server 2017 or later versions, or migrate to either Azure SQL Managed Instance or the Hyperscale service tier of Azure SQL Database to avoid the need for ESUs. For more information, see SQL Server end of support options.

Provisioning

To subscribe to ESUs, customers who use an earlier version of SQL Server need to either self-install or upgrade to SQL Server 2014 or SQL Server 2016. Likewise, customers who use an earlier version of Windows Server need to either deploy their VM from a custom VHD or upgrade to Windows Server 2012 R2 or a later version.

Images deployed through Azure Marketplace come with the SQL IaaS Agent extension preinstalled. Customers who deploy self-installed VMs need to manually register with the SQL IaaS Agent extension:

Subscribe to ESUs

For ESU access, register your SQL Server VM instance with the SQL IaaS Agent extension starting with version 2.0.227.1 or later.

After you register with the SQL IaaS Agent extension, you can subscribe to receive ESUs.

To subscribe to ESUs in the Azure portal, follow these steps:

  1. Go to the virtual machines pane in the Azure portal.

  2. Select your SQL Server VM from the list:

    Screenshot of a list of servers, with one server highlighted.

  3. Under Settings, select SQL Server configuration where you can select the Subscribe to Extended Security Updates option:

    Screenshot of available security updates.

  4. Select Save.

When you subscribe, the VM is enabled for ESU patch installation. You can deliver patches through any patching product or service that installs Microsoft patches, such as Microsoft Update, Windows Update, System Center Configuration Manager, or Azure Update Manager. VMs that have automatic updates enabled through the SQL IaaS Agent extension receive ESU updates automatically.

You can also manually download ESUs from the Extended Security Updates pane for your SQL Server instance in the Azure portal.

Licensing

For SQL Server VM licensing details, review the SQL Server licensing guide.

Supported Azure regions

You can subscribe to ESUs for SQL Server on Azure VMs only in the supported regions listed in this section. To subscribe to ESUs in an unsupported region, contact Microsoft Support to determine the appropriate ESU acquisition path.

You can get ESUs for SQL Server on Azure VMs in the following supported regions:

  • Brazil South
  • Canada Central
  • Canada East
  • Central US
  • East US
  • East US 2
  • North Central US
  • South Central US
  • US Government Virginia
  • West Central US
  • West US
  • West US 2
  • West US 3

Related content

To learn more, see end of support options and Extended Security Updates.

  • Last updated on