Note: This alert does not apply to federally certified voting systems running Windows 7. Microsoft will continue to provide free security updates to those systems through the 2020 election. See Microsoft’s article, Extending free Windows 7 security updates to voting systems, for more information.
On January 14, 2020, Microsoft will end extended support for their Windows 7 and Windows Server 2008 R2 operating systems.[1] After this date, these products will no longer receive free technical support, or software and security updates.
Organizations that have regulatory obligations may find that they are unable to satisfy compliance requirements while running Windows 7 and Windows Server 2008 R2.
All software products have a lifecycle. “End of support” refers to the date when the software vendor will no longer provide automatic fixes, updates, or online technical assistance. [2]
For more information on end of support for Microsoft products see the Microsoft End of Support FAQ.
Systems running Windows 7 and Windows Server 2008 R2 will continue to work at their current capacity even after support ends on January 14, 2020. However, using unsupported software may increase the likelihood of malware and other security threats. Mission and business functions supported by systems running Windows 7 and Windows Server 2008 R2 could experience negative consequences resulting from unpatched vulnerabilities and software bugs. These negative consequences could include the loss of confidentiality, integrity, and availability of data, system resources, and business assets.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and organizations to:
[1] Microsoft End of Support FAQ
[2] Microsoft Windows Lifecyle Fact Sheet
[3] Microsoft Windows Upgrade and Migration Considerations
[4] ComputerWorld: Leaving Windows 7? Here are Some non-Windows Options
[5] CISA Analysis Report AR19-133A: Microsoft Office 365 Security Observations
October 17, 2019: Initial version|October 18, 2019: Added note
blogs.microsoft.com/on-the-issues/2019/09/20/extending-free-windows-7-security-updates-to-voting-systems/
docs.microsoft.com/en-us/windows/deployment/upgrade/windows-upgrade-and-migration-considerations
public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=USDHSCISA_138
support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet
support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet
twitter.com/CISAgov
twitter.com/intent/tweet?text=Microsoft%20Ending%20Support%20for%20Windows%207%20and%20Windows%20Server%202008%20R2+https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-290a
www.computerworld.com/article/3431616/leaving-windows-7-here-are-some-non-windows-options.html
www.dhs.gov
www.dhs.gov/foia
www.dhs.gov/performance-financial-reports
www.facebook.com/CISA
www.facebook.com/sharer/sharer.php?u=https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-290a&title=Microsoft%20Ending%20Support%20for%20Windows%207%20and%20Windows%20Server%202008%20R2
www.instagram.com/cisagov
www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency
www.linkedin.com/sharing/share-offsite/?url=https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-290a
www.microsoft.com/en-us/windows/windows-7-end-of-life-support-information
www.microsoft.com/en-us/windows/windows-7-end-of-life-support-information
www.microsoft.com/en-us/windows/windows-7-end-of-life-support-information
www.oig.dhs.gov/
www.surveymonkey.com/r/CISA-cyber-survey?product=https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-290a
www.us-cert.gov/ncas/analysis-reports/AR19-133A
www.usa.gov/
www.whitehouse.gov/
www.youtube.com/@cisagov
mailto:?subject=Microsoft%20Ending%20Support%20for%20Windows%207%20and%20Windows%20Server%202008%20R2&body=www.cisa.gov/news-events/cybersecurity-advisories/aa19-290a