Windows 7 ESU

Windows 7 ESU is not currently purchased directly through Vuzion CORE, though an upcoming update is planned to enable software subscriptions to be purchased through CORE. For the time being, in order to purchase a software subscription such as Windows 7 ESU, you would need to contact your account manager who will then be able to purchase it and provide you with the product key.

Installation prerequisites

The following steps must be completed before installing and activating ESU keys:

  1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU:

    Windows 7 SP1:
    Servicing stack update for Windows 7 SP1 March 12, 2019
    SHA-2 code signing support update for Windows 7

  2. Install the following SSU and monthly rollup:

    Windows 7 SP1:
    Servicing stack update for Windows 7 SP1 September 10, 2019 (KB4516655)
    October 8, 2019: Monthly Rollup (KB4519976)

  3. Once activated,  continue to use your current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), Microsoft Update Catalog, or whichever patch management solution you prefer.

Installation and activation

Once you have addressed the prerequisites, you’re ready to install and activate Extended Security Updates for machines connected to the internet.

First, install the ESU product key using the Windows Software Licensing Management Tool (slmgr):

Note: Installing the ESU product key will not replace the current OS activation method being used on the device. This is achieved by using the Activation ID to differentiate between the operating system’s activation and the ESU activation.

  1. Open an elevated Command Prompt.
  2. Type slmgr /ipk <ESU key> and select Enter.
  3. If the product key installed successfully, you will see a message similar to the following:


Next, find the ESU Activation ID:

  1. In the elevated Command Prompt, type slmgr /dlv and select Enter.
  2. Note the Activation ID as you will need it in the next step.


Now, you’ll activate the ESU product key:

  1. Open an elevated Command Prompt.
  2. Type slmgr /ato <ESU Activation Id> and press Enter.


The following table outlines possible values for the <ESU Activation Id>:

Windows 7 SP1 (Client)

ESU SKU (or Activation) ID 

Year 1 


Year 2


Year 3


Once you have activated the ESU product key, you can verify the status at any time by following these steps:

  1. Open an elevated Command Prompt.
  2. Type slmgr /dlv and select Enter.
  3. Verify Licensed Status shows as Licensed for the corresponding ESU program, as shown below:


Note: We recommend using a management tool, such as System Center Configuration Manager, to send the slmgr scripts to your enterprise devices.

To install and activate ESU for machines that are not connected to the Internet, you will need to follow these steps:

  1. Download and install the Volume Activation Management Tool (VAMT).
  2. Download the VAMT- ESU configuration file and update your VAMT configuration file.
  3. Configure the client device’s firewall for VAMT.
  4. Add the ESU product key to VAMT.

For systems that will not connect to the internet for activation, you can use the VAMT to perform proxy activation; however, KB4519972 must first be installed.

If you use the VAMT for Activation, the tool has the ability to pick up the activation ID as shown below: