Windows 7 Extended Support

Microsoft's general support for WIndows 7 ended on Janurary 14th 2020. From this date, you won't receive any more updates, most importantly security updates. We recommend to upgrade to Windows 10 to continue to receive updates from Microsoft, however if you are unable to transition, you can purchase extended support from Microsoft.

As a Microsoft Cloud Solutions Provider, Cobweb can provide licence keys for the Extended Support.

Purchase the Licence Key

If you need the purchase a licence key from Cobweb, please contact our Sales Team at

Currently Cobweb can only provide Windows 7 Extended Support licence keys. This does not cover Windows Server 2008 or 2008 R2 which also is now out of general support.

Licence keys run from Janurary 2020 to Janurary 2021 the next year, regardless on when the key is purchased.

Installation Prerequisites

The following steps must be completed before installing and activating ESU keys:

  1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU:

    Windows 7 SP1:
    Servicing stack update for Windows 7 SP1 March 12, 2019
    SHA-2 code signing support update for Windows 7

  2. Install the following SSU and monthly rollup:

    Windows 7 SP1:
    Servicing stack update for Windows 7 SP1 September 10, 2019 (KB4516655)
    October 8, 2019: Monthly Rollup (KB4519976)

  3. Once activated,  continue to use your current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), Microsoft Update Catalog, or whichever patch management solution you prefer.

Installation and Activation

Once you have addressed the prerequisites, you’re ready to install and activate Extended Security Updates for machines connected to the internet.

First, install the ESU product key using the Windows Software Licensing Management Tool (slmgr):

Note: Installing the ESU product key will not replace the current OS activation method being used on the device. This is achieved by using the Activation ID to differentiate between the operating system’s activation and the ESU activation.

  1. Open an elevated Command Prompt.
  2. Type slmgr /ipk <ESU key> and select Enter.
  3. If the product key installed successfully, you will see a message similar to the following:


Next, find the ESU Activation ID:

  1. In the elevated Command Prompt, type slmgr /dlv and select Enter.
  2. Note the Activation ID as you will need it in the next step.


Now, you’ll activate the ESU product key:

  1. Open an elevated Command Prompt.
  2. Type slmgr /ato <ESU Activation Id> and press Enter.


The following table outlines possible values for the <ESU Activation Id>:

Windows 7 SP1 (Client)

ESU SKU (or Activation) ID 

Year 1 


Year 2


Year 3


Once you have activated the ESU product key, you can verify the status at any time by following these steps:

  1. Open an elevated Command Prompt.
  2. Type slmgr /dlv and select Enter.
  3. Verify Licensed Status shows as Licensed for the corresponding ESU program, as shown below:


Note: We recommend using a management tool, such as System Center Configuration Manager, to send the slmgr scripts to your enterprise devices.

Offline Install

To install and activate ESU for machines that are not connected to the Internet, you will need to follow these steps:

  1. Download and install the Volume Activation Management Tool (VAMT).
  2. Download the VAMT- ESU configuration file and update your VAMT configuration file.
  3. Configure the client device’s firewall for VAMT.
  4. Add the ESU product key to VAMT.

For systems that will not connect to the internet for activation, you can use the VAMT to perform proxy activation; however, KB4519972 must first be installed.

If you use the VAMT for Activation, the tool has the ability to pick up the activation ID as shown below: