How to activate the ESU program in Windows 10 step by step

Windows 10 faces end of support on October 14, 2025., but that doesn't mean you have to be unprotected. Microsoft offers the Extended Security Updates (ESU) program to extend critical and important security patches for an additional period of time, for both consumers and organizations.

In this guide you will find Everything you need to activate ESU on your PC: requirements, free and paid registration options for home users, business pricing and terms, MAK key activation (including phone activation), virtualization and cloud scenarios, and program limitations. The idea is to ensure you're not caught short and can continue using your device with the essential security updates until at least October 2026.

What is Windows 10 ESU and how does it work?

Extended Security Updates (ESU) is a Microsoft program This allows Windows 10 computers to continue receiving critical and important security updates after the end of official support. For consumers, coverage extends for an additional year; for organizations, coverage can be extended up to three years with annual subscriptions.

For individuals and SMEs, ESU is available as a paid subscription And Microsoft has enabled additional options: redemption using 1.000 Microsoft Rewards points or free enrollment by synchronizing the PC settings backup with a Microsoft account through Windows Backup/OneDrive. In all cases, a subscription is required. sign in with a Microsoft account on the device.

In organizational environments, ESU is managed with MAK (Multiple Activation Key) keys Obtained from the Microsoft 365 admin center (Volume Licensing section). These keys are installed and activated on each device, allowing the device to receive security updates during the contracted period.

Regarding prices, Microsoft has indicated that for consumers the cost is 30 USD per year (with an alternative option of 1.000 Rewards points or free enrollment if you sync your settings). For organizations, the first-year guideline price is $61 per device, and the cost is doubles in each consecutive year, up to a maximum of three years of coverage.

ESU does not add new features It does not include non-security quality updates or general technical support. Coverage is limited to security patches rated Critical and Important. Microsoft determines patch severity through the Microsoft Security Response Center.

Important: ESU Multiple Activation Keys (MAKs) may appear in the Volume Licensing dashboard of the Microsoft 365 admin center before the end of support, but cannot be used until the effective end date (October 14, 2025), which is when the ESU coverage period begins.

If you don't sign up for ESU, your PC will continue to work, but after the end of support you will no longer receive security updates, which means increasing exposure to risks. Microsoft recommends updating to Windows 11 on compatible computers or, alternatively, migrate to Windows 365 to have a cloud PC with Windows 11.

Device prerequisites and conditions

In order for the team to receive ESU, it must meet specific requirementsIn the consumer and business world, the bare minimum is:

• Windows 10 version 22H2 updated. In commercial environments, 22H2 is required with KB5046613 or later installed.
• Administrator permission on the device to install or activate keys.
• Microsoft account on the PC for any of the consumer options (including paid). This is mandatory for all options.

For activation and validation to work, the computer must be able to contact Microsoft servicesRelevant endpoints for client activation include:

• https://go.microsoft.com/
• https://login.live.com
• https://activation.sls.microsoft.com/
• http://crl.microsoft.com/
• https://validation.sls.microsoft.com/
• https://activation-v2.sls.microsoft.com/
• https://validation-v2.sls.microsoft.com/
• https://displaycatalog.mp.microsoft.com/
• https://licensing.mp.microsoft.com/
• https://purchase.mp.microsoft.com/
• https://displaycatalog.md.mp.microsoft.com/
• https://licensing.md.mp.microsoft.com/
• https://purchase.md.mp.microsoft.com/

In the case of the free registration For consumers, it is necessary to activate the Windows Backup (Windows Backup) and sync your PC settings with OneDrive via your Microsoft account. You get 5 GB of free storage; if you need more data space, you can expand with a subscription, but To register in ESU, simply synchronize the configuration..

The availability of the registration assistant in Windows Update it is gradually unfolding. If it doesn't appear yet, it will arrive before October 14, 2025. Even if you sign up after that date, You will receive the previous cumulative patches and subsequent ones during the coverage period.

Consumer options: free, points, or one-time payment

When your Windows 10 22H2 PC is chosen for ESU, you'll see in Settings > Update & Security > Windows Update a link that opens the registration wizard. From there you can choose between three paths, all of which require Sign in with a Microsoft account in the team:

• Free option: Sync your PC settings backup (Windows Backup/OneDrive). Activate the Windows Backup app and follow the prompts.
• Option with points: exchange with 1.000 Microsoft Rewards points.
• Single payment: buy the extension for 30 USD (or equivalent regional amount).

For the free route, open the app Windows Backup From the Start menu, check the categories (folders, apps and preferences, Windows settings, passwords and Wi‑Fi) and run Make a backupWith this step you are automatically enrolled in ESU to receive patches for one year after the end of support.

If you prefer to pay, remember that One license can cover up to 10 computers linked to the same Microsoft account, Microsoft clarified. This way, if you manage multiple home PCs under the same account, you'll get more out of your purchase.

For those who opt for Microsoft Rewards, the mechanics consist of accumulating points with Bing searches and program activitiesWhen you reach 1.000 points, you can redeem them in the registration wizard. This option doesn't cost you anything, but you'll need to invest some time.

Calendar note: The coverage period for consumers extends until 13th October 2026If you sign up after October 14, 2025, the system will provide you with security patches released since that date and any future patches released during the validity period.

Virtualization and cloud scenarios

Hay specific cases in virtualized and cloud environments where ESU may be included or require additional steps. Microsoft summarizes the main situations as follows:

• Windows 10 VMs hosted by Microsoft or integrated into Azure: In certain environments, ESU is available Without aditional costs and requires no configuration or extra keys.
• Access from Windows 10 to a PC in the Windows 365 cloud- If the user has an active Windows 365 license assigned and the conditions are met, the device has automatic right to ESU during the offer.
  • The Windows 10 computer must be joined to Microsoft Enter or Hybrid EnterRegistered-only (unbound) devices are not eligible for commercial ESU; unmanaged BYOD devices must be managed under consumer ESU.
  • The user must Sign in with your Microsoft account at least once every 22 days to maintain ESU eligibility. The license is valid for 30 days, and the system attempts to renew it starting on the 22nd day.
• Third-party virtualization platforms (Nutanix, Citrix or Omnissa Horizon on Azure VMware Solution): require manual activation of ESU key. You must request a 5×5 key from Microsoft and activate it with VAMT or script.

In all business scenarios, it is key to ensure that devices can reach trigger points previously listed and that license management complies with the organization's policies.

Guide for companies: obtaining MAK and activating ESU

If your organization has acquired ESU, the MAK keys are available in the Microsoft 365 admin centerFrom there, you can view contracts and retrieve the volume keys that will need to be installed on your devices.

1. Enter the admin center and navigate to Billing > Your products, eyelash Volume Licensing.
2. En Contracts, Select View contracts and locate the license identifier where the ESUs were purchased.
3. Click on the three dots (More Actions) and then in View product keys to open the page with the key details and the complete list of MAK.

To install and activate the ESU key on a client, make sure to start a Symbol of the system with elevated privileges and that the computer has access to the Internet and Microsoft activation services. The standard flow is:

1. Install the ESU Key (MAK) correspondent:

   slmgr.vbs /ipk <ESU MAK>

   You should see a dialog box confirming that the product key installed successfully.

2. Activate online with the program activation ID (depending on the year):
   

   ESU Program	Activation ID
   Win10 ESU Year 1	f520e45e-7413-4a34-a497-d2765967d094
   Win10 ESU Year 2	1043add5-23b1-4afb-9a0f-64343c8f3f8d
   Win10 ESU Year 3	83d49986-add3-41d7-ba33-87c7bfb5c0fb

   slmgr.vbs /ato <Activation ID>

   If all goes well, the dialog box will appear indicating that the product was activated successfully.

3. Check status from the license:

   slmgr.vbs /dlv

   The output should show the ESU program name corresponding and the state , the Licensed.

If the computer does not have access to the Internet or the activation servers, you can perform the activation by phone:

1. Install the ESU key with slmgr.vbs /ipk <ESU MAK> and check with slmgr.vbs /dlv.
2. Get the Installation ID (IID) for the specific ESU program:

   slmgr.vbs /dti <Activation ID>

3. Call to Microsoft License Activation Center of your region, provide the IID and obtain the Confirmation IDYou can request an SMS with a link to the page where you can enter your IID; this link works for two devices simultaneously.
4. Apply the Confirmation ID on the device:

   slmgr.vbs /atp <Confirmation ID> <Activation ID>

5. Check the status with slmgr.vbs /dlv and check that it appears Licensed for the program.

To large volumes of offline equipment, use the proxy activation scenario with the VAMT (Volume Activation Management Tool) included in the Windows ADK. Make sure you install the latest version of the ADK and apply the additional VAMT update from https://www.microsoft.com/download/details.aspx?id=106364 to incorporate the files PkeyConfig updated for Windows 10 ESU MAK keys. If the activation quota is exhausted, you can ask for a raise from the boundaries of the MAK.