Merge pull request #250303 from johnmarco/jm-esu-enablement-2

ESU Enablement articles-REDONE PR

Author: v-shils

articles/azure-arc/servers/deliver-extended-security-updates.md

@@ -0,0 +1,82 @@
+---
+title: Deliver Extended Security Updates for Windows Server 2012
+description: Learn how to deliver Extended Security Updates for Windows Server 2012.
+ms.date: 09/14/2023
+ms.topic: conceptual
+---
+
+# Deliver Extended Security Updates for Windows Server 2012
+
+This article provides steps to enable delivery of Extended Security Updates (ESUs) to Windows Server 2012 machines onboarded to Arc-enabled servers. You can enable ESUs to these machines individually or at scale.
+
+## Before you begin
+
+Plan and prepare to onboard your machines to Azure Arc-enabled servers. See [Prepare to deliver Extended Security Updates for Windows Server 2012](prepare-extended-security-updates.md) to learn more.
+
+You'll also need the [Contributor](../../role-based-access-control/built-in-roles.md#contributor) role in [Azure RBAC](../../role-based-access-control/overview.md) to create and assign ESUs to Arc-enabled servers.
+
+## Manage ESU licenses
+
+1. From your browser, sign in to the [Azure portal](https://portal.azure.com).
+
+1. On the **Azure Arc** page, select **Extended Security Updates** in the left pane.
+
+    :::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-main-window.png" alt-text="Screenshot of main ESU window showing licenses tab and eligible resources tab." lightbox="media/deliver-extended-security-updates/extended-security-updates-main-window.png":::
+
+    From here, you can view and create ESU **Licenses** and view **Eligible resources** for ESUs.
+
+> [!NOTE]
+> When viewing all your Arc-enabled servers from the **Servers** page, a banner specifies how many Windows 2012 machines are eligible for ESUs. You can then select **View servers in Extended Security Updates** to view a list of resources that are eligible for ESUs, together with machines already ESU enabled.
+> 
+## Create Azure Arc WS2012 licenses
+
+The first step is to provision Windows Server 2012 and 2012 R2 Extended Security Update licenses from Azure Arc. You link these licenses to one or more Arc-enabled servers that you select in the next section.
+
+After you provision an ESU license, you need to specify the SKU (Standard or Datacenter), type of cores (Physical or vCore), and number of 16-core and 2-core packs to provision an ESU license. You can also provision an Extended Security Update license in a deactivated state so that it won’t initiate billing or be functional on creation. Moreover, the cores associated with the license can be modified after provisioning.
+
+> [!NOTE]
+> The provisioning of ESU licenses requires you to attest to their SA or SPLA coverage.
+> 
+
+The **Licenses** tab displays Azure Arc WS2012 licenses that are available. From here you can select an existing license to apply or create a new license.
+
+:::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-licenses.png" alt-text="Screenshot showing existing licenses." lightbox="media/deliver-extended-security-updates/extended-security-updates-licenses.png":::
+
+1. To create a new WS2012 license, select **Create ESUs license**, and then provide the information required to configure the license on the page.
+
+    For details on how to complete this step, see [License provisioning guidelines for Extended Security Updates for Windows Server 2012](license-extended-security-updates.md).
+
+1. Review the information provided, and then select **Create**.
+
+    The license you created appears in the list and you can link it to one or more Arc-enabled servers by following the steps in the next section.
+
+    :::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-new-license.png" alt-text="Screenshot of licenses tab showing the newly created license in the list." lightbox="media/deliver-extended-security-updates/extended-security-updates-new-license.png":::
+
+## Link ESU licenses to Arc-enabled servers
+
+You can select one or more Arc-enabled servers to link to an Extended Security Update license. Once you've linked a server to an activated ESU license, the server is eligible to receive Windows Server 2012 and 2012 R2 ESUs. 
+
+> [!NOTE]
+> You have the flexibility to configure your patching solution of choice to receive these updates – whether that’s [Update Manager](../../update-center/overview.md), [Windows Server Update Services](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus), Microsoft Updates, [Microsoft Endpoint Configuration Manager](/mem/configmgr/core/understand/introduction), or a third-party patch management solution. 
+> 
+1. Select the **Eligible Resources** tab to view a list of all your Arc-enabled servers running Windows Server 2012 and 2012 R2.
+
+    :::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-eligible-resources.png" alt-text="Screenshot of eligible resources tab showing servers eligible to receive ESUs." lightbox="media/deliver-extended-security-updates/extended-security-updates-eligible-resources.png":::
+
+    The **ESUs status** column indicates whether or not the machine is ESUs-enabled.
+
+1.  To enable ESUs for one or more machines, select them in the list, and then select **Enable ESUs**.
+    
+1.  On the **Enable Extended Security Updates** page, it shows the number of machines selected to enable ESU and the WS2012 licenses available to apply. Select a license to link to the selected machine(s) and then select **Enable**.
+
+    :::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-select-license.png" alt-text="Screenshot of window for selecting the license to apply to previously chosen machines." lightbox="media/deliver-extended-security-updates/extended-security-updates-select-license.png":::
+
+    > [!NOTE]
+    > You can also create a license from this page by selecting **Create an ESU license**.
+    > 
+
+The status of the selected machines changes to **Enabled**.
+
+:::image type="content" source="media/deliver-extended-security-updates/extended-security-updates-enabled-resources.png" alt-text="Screenshot of eligible resources tab showing status of enabled for previously selected servers." lightbox="media/deliver-extended-security-updates/extended-security-updates-enabled-resources.png":::
+
+If any problems occur during the enablement process, see [Troubleshoot delivery of Extended Security Updates for Windows Server 2012](troubleshoot-extended-security-updates.md) for assistance.

articles/azure-arc/servers/media/deliver-extended-security-updates/extended-security-updates-eligible-resources.png

@@ -133,6 +133,10 @@
       href: prepare-extended-security-updates.md
     - name: License provisioning for Extended Security Updates
       href: license-extended-security-updates.md
+    - name: Deliver Extended Security Updates
+      href: deliver-extended-security-updates.md
+    - name: Troubleshoot Extended Security Updates
+      href: troubleshoot-extended-security-updates.md
   - name: Troubleshooting
     items:
     - name: Agent connection issues
@@ -201,4 +205,4 @@
   - name: Regional availability
     href: https://azure.microsoft.com/explore/global-infrastructure/products-by-region/?products=azure-arc&regions=all
   - name: Product feedback
-    href: https://feedback.azure.com/d365community/forum/5c778dec-0625-ec11-b6e6-000d3a4f0858
+    href: https://feedback.azure.com/d365community/forum/5c778dec-0625-ec11-b6e6-000d3a4f0858

articles/azure-arc/servers/media/deliver-extended-security-updates/extended-security-updates-enabled-resources.png

@@ -0,0 +1,39 @@
+---
+title: How to troubleshoot delivery of Extended Security Updates for Windows Server 2012 through Azure Arc
+description: Learn how to troubleshoot delivery of Extended Security Updates for Windows Server 2012 through Azure Arc.
+ms.date: 09/14/2023
+ms.topic: conceptual
+---
+
+# Troubleshoot delivery of Extended Security Updates for Windows Server 2012
+
+This article provides information on troubleshooting and resolving issues that may occur while [enabling Extended Security Updates for Windows Server 2012 and Windows Server 2012 R2 through Arc-enabled servers](deliver-extended-security-updates.md).
+
+## License provisioning issues
+
+If you're unable to provision a Windows Server 2012 Extended Security Update license for Azure Arc-enabled servers, check the following:
+
+- **Permissions:** Verify you have sufficient permissions (Contributor role or higher) within the scope of ESU provisioning and linking.  
+
+- **Core minimums:** Verify you have specified sufficient cores for the ESU License. Physical core-based licenses require a minimum of 16 cores, and virtual core-based licenses require a minimum of 8 cores per virtual machine (VM). 
+
+- **Conventions:** Verify you have selected an appropriate subscription and resource group and provided a unique name for the ESU license.     
+
+## ESU enrollment issues
+
+If you're unable to successfully link your Azure Arc-enabled server to an activated Extended Security Updates license, verify the following conditions are met:
+
+- **Connectivity:** Azure Arc-enabled server is **Connected**. For information about viewing the status of Azure Arc-enabled machines, see [Agent status](overview.md#agent-status).
+
+- **Agent version:** Connected Machine agent is version 1.34 or higher. If the agent version is less than 1.34, you need to update it to this version or higher.
+
+- **Operating system:** Only Azure Arc-enabled servers running the Windows Server 2012 and 2012 R2 operating system are eligible to enroll in Extended Security Updates.
+
+- **Environment:** The connected machine should not be running on Azure Stack HCI, Azure VMware solution, or as an Azure virtual machine. In these scenarios, WS2012 ESUs are available for free.
+
+- **License properties:** Verify the license is activated and has been allocated sufficient physical or virtual cores to support the intended scope of servers.
+
+## ESU patches issues
+
+If you have issues receiving ESUs after successfully enrolling the server through Arc-enabled servers, or you need additional information related to issues affecting ESU deployment, see [Troubleshoot issues in ESU](/troubleshoot/windows-client/windows-7-eos-faq/troubleshoot-extended-security-updates-issues).
+