Microsoft added text to the October 2023 Product Terms confirming that if a customer has enabled Extended Security Updates through Azure Arc they may use the updates on licensed Disaster Recovery servers and in Dev/Test environments.
Find the terms here: https://bit.ly/3Y6xsac, and note that the same rules apply for the traditional 1-year ESUs, the terms of which are here: https://bit.ly/46ldV8W.
Windows Server 2012/2012 R2 and SQL Server 2012 are now out of support but it’s possible to purchase Extended Security Updates licences to receive security updates for a further three years for these products. The idea of ESUs isn’t new, but what IS new is that 1-year ESUs are now available through CSP (rather than just an EA/EES) and there’s a new PAYG option for ESUs through Azure Arc. This is a great page to learn more: https://bit.ly/3QBfgnn, and to get links to further information.
Extended Security Updates are critical if you want to continue safely running Windows Server workloads on versions that are out of support. They’re free for customers running Windows Server in Azure and available to purchase through an EA for on-premises workloads.
Servers in Azure receive ESUs by default, and there’s an excellent article here (https://bit.ly/3LTxdrS) on how it works for on-premises servers where it’s not automatic and you need to register your servers.
If you’re running Azure Stack HCI then ESUs are free but you need to turn on Azure Benefits – and this article (https://bit.ly/3M4gX7s) is useful for explaining that process. If you’re new to Extended Security Updates, then this article is a good place to start: https://bit.ly/3NFed1C.