Hi @Travis@KIC Applicable Windows VMs hosted in Azure will receive free extended security updates automatically until the end of ESU for Windows server 2012 R2 which is October 13, 2026.
For VMs hosted in Azure, the process of enabling the server for Extended Security Updates is automatically completed for you. Updates should download and install without additional configuration.
For SQL servers in Azure, as long as the SQL IaaS extension agent is deployed and running on the SQL VM it will also received extended security updates automatically at no additional cost.
More info here:
https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates-overview
https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates-deploy