2027 IT end-of-life calendar

Microsoft will release its last security update for Windows Server 2016 on January 12, 2027. The servers keep running after that date, but they stop receiving security updates unless they are enrolled in paid Extended Security Updates.

Yes, for a fee. Microsoft offers Extended Security Updates for Windows Server 2016 through Azure Arc for up to three years, through 2030. Enrollment opened in the Azure portal on August 3, 2026, and billing begins January 13, 2027. Buying them requires Software Assurance through volume licensing, unless the servers are licensed through SPLA or a server subscription. They cover Critical and Important security updates only, not new features or non-security fixes.

During mainstream support, Microsoft provides security and non-security updates. In extended support, security updates continue at no cost, while non-security updates and support become paid, and Microsoft no longer accepts design change or new feature requests. After end of support there are no new security updates, no non-security updates and no assisted support.

Organizations that enroll Windows 10 PCs in paid Extended Security Updates receive security updates until October 12, 2027 for Year 2, and until October 10, 2028 for Year 3, which is the maximum. The program is sold by year, so buying Year 2 means also buying Year 1. Commercial Enterprise, Education and Pro editions qualify, and the PC must run Windows 10 version 22H2.

We have not found a Microsoft-announced Extended Security Updates program for SQL Server 2017, whose end of support is October 12, 2027. Microsoft does offer Extended Security Updates through Azure Arc for SQL Server 2014 and 2016. Confirm SQL Server 2017 options with your Microsoft licensing contact before you plan around one.

Broadcom lists October 11, 2027 as the end of general support for vSphere 8.0. Confirm which support options apply to your license with Broadcom or your VMware partner, and plan a move to a release that is still supported.

It depends on the manufacturer and the model, and each manufacturer publishes its own dates. In 2027, for example, the Cisco Meraki MX100 reaches end of support on February 1, the Meraki MX64 on July 26, and Cisco ASA software releases 9.18 and 9.19 on November 30. The firewall section of this page links to the lifecycle page for Cisco Meraki, Fortinet, Palo Alto Networks, Cisco ASA, Check Point, SonicWall, WatchGuard, Sophos and Juniper. Firewalls are commonly replaced after five to seven years, so any device that old is worth checking now.

The firewall keeps passing traffic, but the manufacturer stops providing security patches and usually stops technical support and hardware replacement. A firewall sits at the edge of your network, so a flaw that never gets patched is exposed to the internet. Plan the replacement before the date, and treat internet-facing firewalls as the first priority.

List every server, hypervisor host, database, firewall, switch and operating system version you run, with the hardware underneath each one. Match each item to its vendor end-of-support date, then rank the list by exposure: internet-facing systems, domain controllers and anything that holds sensitive data come first. Corsica Technologies can build this inventory with you.

Yes, through a Hardware as a Service model. Corsica Technologies' Hardware as a Service provides managed servers, firewalls and other network equipment, laptops and desktops for one fixed monthly fee that includes 24/7 monitoring, preventative maintenance and replacement of end-of-life devices. Contact Corsica to see whether it fits your environment and which devices it would cover.

As early as you can. Hardware lead times have been long, and Micron has said memory supply will stay tight through 2028, so a quote can change before an order ships. Getting a quote and a delivery date now leaves time to test the migration before the end-of-support date.