Microsoft has rolled out updated details for its Extended Security Updates (ESU) program, ensuring that Windows 10 devices continue to receive essential security patches well beyond the official end-of-support date of October 14, 2025.
According to the latest guidelines published on Microsoft Learn, organizations will pay $61 USD per device for Year One, with fees doubling in subsequent years over a three‐year period.
This update comes as part of Microsoft’s broader effort to transition users away from legacy systems, a strategy that has been detailed in earlier reporting on the phase‐out of free Windows 11 upgrades and the end of Microsoft 365 support for Windows 10, as discussed in our coverage on Windows 10 end-of-support and the paid security lifeline.
Licensing Details and Upgrade Guidance
Under the new ESU program, updates will begin approximately one year before Windows 10 reaches its end-of-support, with the first update scheduled for November 2025. The program utilizes a 5-by-5 activation method available through Volume Licensing.
As stated in the official guidance, “Windows 10 PCs will continue to work, but we recommend customers upgrade eligible PCs to Windows 11 using Windows Autopatch, Microsoft Intune, or transition to a new Windows 11 PC for the best, most secure computing experience.”
This recommendation underscores the necessity of moving to a more secure platform and is part of a larger narrative about the dwindling free upgrade window, as covered in previous reporting on Windows 10 support cessation.
Hardware Security and the TPM 2.0 Debate
The ESU update arrives amid broader discussions on hardware security, notably regarding the Trusted Platform Module (TPM) 2.0 requirement for Windows 11.
TPM 2.0 is a specialized hardware chip that securely stores cryptographic keys and enables system features like BitLocker and Secure Boot, effectively serving as a secure vault for sensitive data. Critics, however, argue that mandating TPM 2.0 forces users to upgrade perfectly functional hardware.
The introduction of the ESU program is part of a calculated market strategy to phase out support for Windows 10 and shift users to Windows 11. This strategic pivot is underscored by previous reports on the end of free Windows 11 upgrades and the discontinuation of Microsoft 365 support for Windows 10.
The changes compel enterprises and individual users to carefully weigh the cost of extended security support against the benefits of upgrading.
Additional Perspectives and Future Outlook
The ESU program id a temporary yet necessary measure that underscores Microsoft’s intent to retire Windows 10. The cumulative licensing fees and the exclusion of non-security updates highlight a strategic shift towards a more secure operating environment provided by Windows 11.
This not only affects budgeting and upgrade cycles for enterprises but also sets a precedent for the handling of legacy software support.