Microsoft Extends Windows Server 2022 Hotpatching Support to October 2027
What Happened — Microsoft announced that hotpatching for Windows Server 2022 Datacenter: Azure Edition will be supported through October 2027, a full year beyond the mainstream end‑of‑support date. The extension applies only to systems enrolled in the Hotpatch update channel and keeps the existing monthly cadence.
Why It Matters for Compliance & Audit Readiness
- Continuous, no‑reboot security updates satisfy SOC 2 CC6.1 (System Operations) and demonstrate a mature patch‑management control.
- Extending hotpatch support reduces forced reboots, helping you meet the Availability criteria (CC5.1) and maintain service continuity.
- Enrollment logs and hotpatch status become audit‑ready evidence of “timely remediation of identified vulnerabilities.”
Who Is Affected – Enterprises and service providers that run Windows Server 2022 Datacenter Azure Edition in on‑premises data centers or Azure VMs, especially those with high‑availability or regulated workloads.
Recommended Actions
- Verify that all eligible servers are enrolled in the Hotpatch channel via Microsoft Intune or Graph API.
- Update your patch‑management policy to include hotpatch as an approved remediation method.
- Capture enrollment and monthly hotpatch logs as part of your continuous‑compliance evidence repository.
- Map the hotpatch process to SOC 2 change‑management and system‑operations controls in your control‑mapping tool.
Technical Notes – Hotpatch injects security fixes directly into the memory of running processes, avoiding a reboot. Non‑security updates (e.g., .NET patches) still require a restart. The extension applies only to the Azure Edition; other Windows Server 2022 editions retain the standard support timeline. Source: BleepingComputer