How Do I Install a Windows 7 ESU License?

In a previous blog article, we provided information on what the Windows 7 Extended Security Update (ESU) license is. We also provided why it is so important to purchase if you are not planning to decommission your Windows 7 workstations. If this is something your organization decides to move forward with, there are steps that need to be followed to properly roll out this new license to your Windows 7 PCs. Below are some steps to guide you on how to install Windows 7 ESU License manually. If you are planning to roll this license out using KMS, an additional article will be written specifically to that method.

Prerequisites

Confirm or install the following updates:

1. Servicing stack update for Windows 7 SP1: KB4490628
   • https://support.microsoft.com/help/4490628
2. SHA-2 code signing support update for Windows 7: KB4474419
   • https://support.microsoft.com/help/4474419
3. Servicing stack update for Windows 7 SP1: KB4536952
   • https://support.microsoft.com/help/4536952
4. Extended Security Updates (ESU) Licensing Preparation Package: KB4538483
   • https://support.microsoft.com/help/4538483

Installation for Windows 7 ESU License

Once the prerequisite updates are installed you are ready to perform the installation of the Windows 7 ESU license. Make sure you received your license key from the Volume License team at Microsoft or from your Cloud Solution Partner (CSP). Please note that this license key does not replace the existing Windows Operating System key on the PC.

1. Open an elevated Command Prompt.
2. Type slmgr /ipk <ESU License> and press Enter.
3. If the product key is accepted, you will receive the following prompt below:

4. Within the same Command Prompt, type slmgr /dlv and press Enter.
5. Take note of the Activation ID from the prompt that appears.

Once you confirm that the ESU license key activated successfully you can determine your update strategy. This can be done through normal Windows updates, SCCM, WSUS or the Microsoft Update Catalog. If your organization is currently using a proxy firewall, you will need to whitelist the activation endpoints. The following URLs need to be added to your whitelist:

• https://go.microsoft.com/fwlink/?linkid=88338
• https://activation.sls.microsoft.com/slspc/SLActivate.asmx
• https://go.microsoft.com/fwlink/?linkid=88339
• https://activation.sls.microsoft.com/slrac/SLCertify.asmx
• https://go.microsoft.com/fwlink/?linkid=88340
• https://activation.sls.microsoft.com/slpkc/SLCertifyProduct.asmx
• https://go.microsoft.com/fwlink/?linkid=88341
• https://activation.sls.microsoft.com/sllicensing/SLLicense.asmx

If your organization is using the Volume Activation Tool (VAMT), the following URLs will also require whitelisting:

• https://activation.sls.microsoft.com/BatchActivation/BatchActivation.asmx
• http://go.microsoft.com/fwlink/?LinkId=82160

To confirm your whitelists are setup appropriately, please try the following steps:

1. 1. Open an Elevated Command Prompt.
   2. Type slmgr /ato <Activation ID> and press Enter.

You should receive the following message prompt that the key was successful:

You can then verify the status of your ESU license by running the following commands:

1. Open an elevated Command Prompt.
2. Type slmgr /dlv and press Enter.

You will receive the following prompt. Under License Status, it should show as Licensed.

If you have numerous machines that are not connected to the internet, you can install and activate the Volume Activation Management Tool (VAMT).

1. Download the Volume Activation Management Tool.
   1. https://docs.microsoft.com/en-us/windows/deployment/volume-activation/install-vamt

2. Download the VAMT-ESU configuration file and update VAMT.
   1. https://www.microsoft.com/en-us/download/details.aspx?id=100304

3. Configure the device’s firewall for the VAMT.
   1. https://docs.microsoft.com/en-us/windows/deployment/volume-activation/configure-client-computers-vamt

4. Add the ESU product key to VAMT.
   1. https://docs.microsoft.com/en-us/windows/deployment/volume-activation/add-remove-product-key-vamt

5. 5. Right-click the product and select Activate. Then select the appropriate activation method.

 

For any questions or to purchase Windows 7 ESU licenses, please contact us at www.messageops.com or call 877-788-1817; press option 2.