From 141717e7509a6ccd9aa82076bc4eaaf3c8fb50e3 Mon Sep 17 00:00:00 2001 From: WindowsAddict Date: Sat, 11 Oct 2025 02:50:18 +0530 Subject: [PATCH] Update TSforge doc --- docs/tsforge.md | 32 ++++++++++++++++++++++++++------ 1 file changed, 26 insertions(+), 6 deletions(-) diff --git a/docs/tsforge.md b/docs/tsforge.md index 10de4fc..2933c18 100644 --- a/docs/tsforge.md +++ b/docs/tsforge.md @@ -5,7 +5,7 @@ - How to use it? Please find the instructions [here](intro.md#how-to-activate-windows--office--extended-updates-esu). - This activation is permanent until a Windows reinstall or a major feature upgrade (not to be confused with small enablement upgrades or monthly cumulative updates). - This activation method doesn't modify any Windows components and doesn't install any new files. -- Once the system is activated, hardware can be changed arbitrarily without triggering de-activation. +- Once the system is activated (with ZeroCID or KMS4k), hardware can be changed arbitrarily without triggering de-activation. - Internet is not required for ZeroCID or KMS4k, but it is required for StaticCID. The script uses the StaticCID method from Windows 11 24H2 (26100) and later versions. - This activation method can activate any of the following products if a phone license is available and licensing is managed by the system's SPP. For example, * Windows Vista and later @@ -53,7 +53,7 @@ ### StaticCID -- In [Windows 11 build 27802](https://betawiki.net/wiki/Windows_11_build_27802), Microsoft introduced a bug that causes Confirmation ID cache validation to always fail, forcing validation directly from the stored Confirmation ID each time the license status is checked. +- In [Windows 11 build 27802](https://betawiki.net/wiki/Windows_11_build_27802), Microsoft introduced a [bug](blog/pesky-ampersands) that causes Confirmation ID cache validation to always fail, forcing validation directly from the stored Confirmation ID each time the license status is checked. - Because of this, ZeroCID does not work in any Windows 11/Server 2025 Insider Canary builds released afterwards, or any Windows 11/Server 2025 retail/release preview builds newer than 26100.4188. - To circumvent this bug, TSforge is used to set the current Installation ID to that of a known key that can be used to generate valid Confirmation IDs. - Confirmation IDs are then obtained over the internet using [a client](https://github.com/dadorner-msft/activationws) for the [VAMT](https://learn.microsoft.com/en-us/windows/deployment/volume-activation/introduction-vamt) API. @@ -106,7 +106,7 @@ This activation method can activate any of the following products if a phone lic - **Windows Server 2012** (ServerDatacenter, ServerStandard and their Core variants) - **Windows 8.1** (Enterprise, Professional, EmbeddedIndustry and their E/N variants) - **Windows Server 2012 R2** (ServerDatacenter, ServerStandard and their Core variants) - - **Windows 10** (Core, CoreCountrySpecific, CoreSingleLanguage, Education, Enterprise, IoTEnterprise, Professional, ProfessionalEducation, ProfessionalWorkstation, ServerRdsh and their N variants) + - **Windows 10** (Core, CoreCountrySpecific, CoreSingleLanguage, Education, Enterprise, IoTEnterprise, Professional, ProfessionalEducation, ProfessionalWorkstation, ServerRdsh, PPIPro and their N variants) - **8/8.1 APPXLOB** - Client - Embedded Industry @@ -223,7 +223,7 @@ This activation method does not work if a phone license is not available or if l - It does not support activation on non-azure systems. - **Windows 10 Consumer ESU (1 Year)** - Its licensing is based on CLIP, not SPP. - - You can activate commercial ESU for 3 years on Pro and higher level editions with TSforge. + - You can activate commercial ESU for 3 years with TSforge. :::info @@ -253,17 +253,37 @@ This activation method does not work if a phone license is not available or if l - Microsoft offers paid [Extended Security Updates](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates) (ESU) for several Windows versions after their product lifecycle ends. - You can activate the Windows ESU / Premium Assurance license using the TSforge option in MAS. +--- + +#### Windows 10 ESU FAQ + +#### I activated ESU with the TSforge option, but the Windows Update page in Settings still asks me to enroll. Why? + +Microsoft provides Extended Security Updates (ESU) through several channels, such as CommercialAzureESU, CommercialW365ESU, CommercialKeybasedESU, and ConsumerESU. + +TSforge activates the [Commercial Key-based ESU](https://learn.microsoft.com/en-us/windows/whats-new/enable-extended-security-updates#get-the-product-keys-for-activating-extended-security-update-esu-licenses), which is intended for use by administrators in business environments. + +The Windows Update page in Settings does not display the status of Commercial Key-based ESU activations and may still prompt you to enroll in Consumer ESU. This behavior is normal and can safely be ignored. + +#### How can I check if TSforge ESU is activated? + +According to the official [Microsoft documentation](https://learn.microsoft.com/en-us/windows/whats-new/enable-extended-security-updates#install-and-activate-the-esu-key), you can verify the status of a Commercial Key-based ESU activation by running the following command in an elevated Command Prompt: + +`cscript C:\Windows\System32\slmgr.vbs /dlv` + +--- + | Windows Version | Supported Editions List | ESU Period | Minimum Required Updates | |------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Windows Server 2008 | ServerDatacenter, ServerStandard, ServerEnterprise
and their V/Core/VCore variants | [6 Years](https://web.archive.org/web/20170331081347/https://blogs.technet.microsoft.com/hybridcloud/2017/03/01/now-available-windows-server-premium-assurance-and-sql-server-premium-assurance/) with Premium Assurance License
Jan 2020 to Jan 2026 | Windows Server 2008 SP2
+
KB4493730 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2019/04/windows6.0-kb4493730-x64_5cb91f4e9000383f061b80f88feffdf228c2443c.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2019/04/windows6.0-kb4493730-x86_ab4368f19db796680ff445a7769886c4cdc009a0.msu)
KB4474419 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2019/09/windows6.0-kb4474419-v4-x64_09cb148f6ef10779d7352b7269d66a7f23019207.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2019/09/windows6.0-kb4474419-v4-x86_fd568cb47870cd8ed5ba10e1dd3c49061894030e.msu)
**Reboot**
KB5016891 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.0-kb5016891-x64_1b5f7e1030f5d229a7618c09f1617fd1ed00e90f.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.0-kb5016891-x86_cf3aef17f12a6dc85dd20a06e5ba9f4c882e286f.msu) | -| Windows 7 | Enterprise, Professional, Ultimate
and their E/N variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-7)
Jan 2020 to Jan 2023

4-6 Years ESU is not officially supported,
but you can manually install Server 2008 R2 x64 updates until Jan 2026 | Windows 7 SP1
+
KB4490628 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x64_d3de52d6987f7c8bdc2c015dca69eac96047c76e.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x86_3cdb3df55b9cd7ef7fcb24fc4e237ea287ad0992.msu)
KB4474419-v3 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu)
**Reboot**
KB5039339 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x64_f62846508976a6e5325ab1dca0783f9b3a60a564.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x86_fa942048bba2a167242451236f9daf00940588aa.msu)
KB4575903 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x64_b4d5cf045a03034201ff108c2802fa6ac79459a1.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x86_5905c774f806205b5d25b04523bb716e1966306d.msu)
KB3138612 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x64_f7b1de8ea7cf8faf57b0138c4068d2e899e2b266.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x86_6e90531daffc13bc4e92ecea890e501e807c621f.msu)
KB5016892 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x64_52b68ba8744cb47ddfcecd19238087625e1a5fbd.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x86_ffb5b83149833e7f969f69e4f152fee5c1fdbc68.msu) | +| Windows 7 | Enterprise, Professional, Ultimate
and their E/N variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-7)
Jan 2020 to Jan 2023

4-6 Years ESU is not officially supported,
but you can manually install Server 2008 R2 x64 updates until Jan 2026

You can find the latest KB numbers for updates in the [W7 changelog list](https://db.tt/Nbmb4PGt),
maintained by [abbodi1406](https://forums.mydigitallife.net/threads/abbodi1406s-batch-scripts-repo.74197/), and download them directly from the [Microsoft Update Catalog](https://catalog.update.microsoft.com/home.aspx). | Windows 7 SP1
+
KB4490628 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x64_d3de52d6987f7c8bdc2c015dca69eac96047c76e.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x86_3cdb3df55b9cd7ef7fcb24fc4e237ea287ad0992.msu)
KB4474419-v3 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu)
**Reboot**
KB5039339 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x64_f62846508976a6e5325ab1dca0783f9b3a60a564.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x86_fa942048bba2a167242451236f9daf00940588aa.msu)
KB4575903 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x64_b4d5cf045a03034201ff108c2802fa6ac79459a1.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x86_5905c774f806205b5d25b04523bb716e1966306d.msu)
KB3138612 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x64_f7b1de8ea7cf8faf57b0138c4068d2e899e2b266.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x86_6e90531daffc13bc4e92ecea890e501e807c621f.msu)
KB5016892 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x64_52b68ba8744cb47ddfcecd19238087625e1a5fbd.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x86_ffb5b83149833e7f969f69e4f152fee5c1fdbc68.msu) | | Windows 7 Embedded POSReady7 | Embedded | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-embedded-posready-7)
Oct 2021 to Oct 2024 | Same as Windows 7 minus KB5016892 | | Windows 7 Embedded Standard | Embedded | [3 years](https://learn.microsoft.com/en-us/lifecycle/products/windows-embedded-standard-7)
Oct 2020 to Oct 2023 | Same as Windows 7 minus KB5016892 | | Windows Server 2008 R2 | ServerDatacenter, ServerStandard, ServerEnterprise
and their V/Core/VCore variants | [6 Years](https://web.archive.org/web/20170331081347/https://blogs.technet.microsoft.com/hybridcloud/2017/03/01/now-available-windows-server-premium-assurance-and-sql-server-premium-assurance/) with Premium Assurance License
Jan 2020 to Jan 2026 | Same as Windows 7 | | Windows Server 2012 | ServerDatacenter, ServerStandard and their Core variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012)
Oct 2023 to Oct 2026 | KB5017221 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows8-rt-kb5017221-x64_d01e9b9b910f5f1e374bc1b89a8d00c1a97e215f.msu)
KB2937636 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/crup/2014/07/windows8-rt-kb2937636-x64_29e0b587c8f09bcf635c1b79d09c00eef33113ec.msu) | | Windows 8.1 | Enterprise, Professional, EmbeddedIndustry and their E/N variants | ESU is not officially supported,
but you can manually install Server 2012 R2 (for x64) updates until Jan 2024,
and Embedded 8.1 (for x86) updates until July 2023 | Build 9600.17415
+
KB3021910 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2015/04/windows8.1-kb3021910-x64_e291c0c339586e79c36ebfc0211678df91656c3d.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2015/04/windows8.1-kb3021910-x86_7e70173bec00c3d4fe3b0b8cba17b095b4ed2d20.msu)
KB3172614 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2016/07/windows8.1-kb3172614-x64_e41365e643b98ab745c21dba17d1d3b6bb73cfcc.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2016/07/windows8.1-kb3172614-x86_d11c233c8598b734de72665e0d0a3f2ef007b91f.msu)
KB5017220 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows8.1-kb5017220-x64_d771111b22ec71560b207a6735d5ecebd47c4f38.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2022/08/windows8.1-kb5017220-x86_3134a18dac1b1fe4f656c9e25d0e4aaa75619d16.msu) | | Windows Server 2012 R2 | ServerDatacenter, ServerStandard and their Core variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2)
Oct 2023 to Oct 2026 | Same as Windows 8.1 | -| Windows 10 | Core, CoreCountrySpecific, CoreSingleLanguage,
Education, Enterprise, IoTEnterprise,
Professional, ProfessionalEducation,
ProfessionalWorkstation, ServerRdsh and their N variants | [3 Years](https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates)
Oct 2025 to Oct 2028 | Windows 10 22H2

ESU license added in 19045.4957

ESU license last updated in 19045.6156

Just run Windows Update. | +| Windows 10 | Core, CoreCountrySpecific, CoreSingleLanguage,
Education, Enterprise, IoTEnterprise,
Professional, ProfessionalEducation,
ProfessionalWorkstation, ServerRdsh and their N variants | [3 Years](https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates)
Oct 2025 to Oct 2028 | Windows 10 22H2

ESU license added in 19045.4957

ESU license last updated in 19045.6388

Just run Windows Update. | ------------------------------------------------------------------------