After 10 October 2023, Windows Server 2012 and 2012 R2 will stop receiving critical security updates and regular patches

The Windows Server 2012 and 2012 R2 end of life deadline of 10 October 2023 is fast approaching. After 10 October 2023, Windows Server 2012 and 2012 R2 will stop receiving critical security updates and regular patches, making security and compliance a serious concern.

The upgrade process can take a long time to plan and implement which is why we are urging IT Managers and users to act now. Microsoft recommends upgrading to the latest supported Windows Server version, which is now Windows Server 2022.

In this post we discuss: Windows Server, mainstream and extended support, end of support, extended security updates, what you should do if you have to keep using Windows Server 2012 / 2012 R2 past the end of life, the risks of using end of life software and your options for upgrading to a new solution.

What is Windows Server 2012

Windows Server 2012 is the sixth version of the Windows Server operating system by Microsoft. Released in 2012, it’s the server version of Windows based on Windows 8 and succeeded Windows Server 2008 R2.

Windows Server 2012 was intended for businesses and organisations and included plenty of enterprise software. At its peak, the largest multinationals, government departments, healthcare providers and small businesses right around the world relied on Windows Server 2012 or 2012 R2.

The Windows Server 2012 end of life deadline is approaching

The Windows Server 2012 and 2012 R2 end of life deadline of 10 October 2023 is fast approaching. After 10 October 2023, Windows Server 2012 and 2012 R2 will stop receiving critical security updates and regular patches, making security and compliance a serious concern.

Mainstream Support and Extended Support. What do these mean?

Windows Server 2012 and 2012 R2 follow Microsoft’s Fixed Lifecycle Policy, which contains five years of mainstream support and five years of extended support.

During the mainstream support period, Windows Server 2012 and 2012 R2 received all types of updates and support. During the extended support period, they only receive security updates. After the extended support period ends, the products are no longer supported by Microsoft.

Extended Support

The extended support phase for Windows Server 2012 and 2012 R2 refers to the last five years of a product’s lifecycle. In this case it’s 09 October 2018 to 10 October 2023. During this period, your Windows Server 2012 and 2012 R2 only receives security updates, and you can no longer request non-security updates or new design changes.

Note: Windows Server 2012 and 2012 R2 are both currently in the extended support phase.

Extended Security Update (ESU)

As a last resort option, where critical legacy workloads are unable to be migrated to a current version of Windows Server, IT Managers and users can opt-in to a premium plan from Microsoft to receive extended security updates for Windows Server 2012 and 2012 R2.

Note: If you choose to migrate to Microsoft Azure, you’ll receive these updates for free.

If you’re running Windows Server 2012 or 2012 R2 on-premises, you’ll need to purchase the ESU annually. They’re available through specific volume licensing programs. You’ll need to contact your Microsoft partner or account team for the specifics, but coverage will be available in three consecutive 12-month increments following end of support. You won’t be able to consume partial periods e.g. you can’t get just six months.

For anyone not on this premium plan, there will be no patches or security updates after 10 October 2023.

The risks of using end of life software

An unsupported operating system will no longer receive any security updates, official patches, or bug fixes so your Windows Server 2012 or 2012 R2 will be increasingly insecure after 10 October 2023. Here’s a list of the risks associated with using end of life software.

Security vulnerabilities: Without security fixes being issued by Microsoft, Windows Server 2012 or 2012 R2 will become an easy target for security vulnerabilities. For this reason alone, you should upgrade as soon as possible. Relying on a firewall and antivirus will not offer protection and hackers will be quick to exploit new vulnerabilities.

Software incompatibility: Software applications tend to be optimised for the most recent operating systems so using Windows Server 2012 or 2012 R2 means you won’t be able to upgrade to the latest versions and you’ll likely have to hold onto your other legacy applications which are probably at end of life too.

Meeting compliance obligations: Industries with heavy regulation like financial services and healthcare handle lots of sensitive data. Entrusting your critical information to a decade-old operating system or unsecure application is not an option to consider. In addition to security breaches, you could risk fines, company shutdowns, or possible jail time.

Increased operating costs: Maintaining and supporting end of life software is inefficient and expensive, especially when compared to the cost of a critical line of business application failing.

Poor performance and reliability: End of life software and legacy apps are prone to failure and experience degraded performance. With IT being the lifeblood of most businesses, can you really afford to be knocked offline?

The options for upgrading from Windows Server 2012

The business case for upgrading from Windows Server 2012 or 2012 R2 is compelling. The good news is that you have three viable options. Upgrade to Windows Server 2022, modernise the application, or transition workloads to Azure. Here’s more info on each option.

Upgrade to Windows Server 2022

Windows Server 2022 is the tenth and latest major release of the Windows Server operating system by Microsoft. It was released on 18 August 2021 and is built on the strong foundation of Windows Server 2019. Windows Server 2022 is considered the most secure version of Windows Server and comes with upgraded security features.

Transitioning your workloads from Windows Server 2012 to Windows Server 2022 generally involves building the new Windows 2022 server, installing application components, performing user acceptance testing, copying over application data and scheduling the final cutover.

Modernise the Application

Usually, the more complex option but with the biggest rewards. The legacy application is transitioned to a modern alternative, often taking advantage of the SAAS deployment model (accessing applications directly over the Internet with a browser) and moving away from managing server infrastructure. In this subscription model, CapEx costs are transitioned to OpEx, and the operational overhead with managing server infrastructure is completely removed.

For example, traditional file shares would be migrated to SharePoint Online.

Transition Workloads to Azure

Sometimes the server infrastructure we use is held hostage by the applications we are running. If your application is not supported on newer server Operating Systems, you might need to buy some time until the vendor makes the necessary application changes.

Transitioning your Windows Server 2012 / 2012 R2 workloads to Azure will grant you 3 years of Extended Security Updates (ESUs) for free, avoiding the expense associated with purchasing ESUs for on-premises workloads. Running workloads in the cloud also has many other benefits, such as scalable resources and removing the reliance on ageing on-premises systems.

In this scenario, your servers would be transitioned using the ‘lift & shift’ method. This means your server will be copied to Azure in the same state as it is today but will continue running on physical infrastructure maintained by Microsoft.

Talk to us about your Windows Server

We have extensive Microsoft expertise with our teams designing and implementing hundreds of Windows Server projects for companies of all sizes. Get in touch and tell us about your Windows Server.