Microsoft Makes Hotpatching Enabled by Azure Arc Free For Windows Server 2025
Hotpatching in Windows Server 2025 via Azure Arc enables seamless security updates without restarts across hybrid environments.
Key Takeaways:
- Hotpatching enabled by Azure Arc is available for free for Windows Server 2025.
- Security updates can be applied without system restarts.
- This feature supports hybrid and multicloud server environments.
Keeping servers secure has long meant disruptive restarts, but Microsoft is changing that approach with a major update. With Windows Server 2025, hotpatching enabled by Azure Arc is now available at no additional cost, allowing organizations to apply critical security fixes in real time without interrupting operations.
Hotpatching is a feature that allows security updates to be applied directly to a running system without requiring a restart by modifying the in‑memory code of active processes. This approach helps maintain continuous uptime, reduces service disruption, and enables faster deployment of security fixes, while still using periodic full updates when deeper system changes require a reboot.
With Windows Server 2025, hotpatching is no longer limited to Azure virtual machines and can now be used across on‑premises and multicloud environments via Azure Arc. Azure Arc allows organizations to consistently control and maintain their servers, regardless of where they are hosted.
Management of hotpatch updates across hybrid and multicloud environments enabled by Azure Arc (Image Credit: Microsoft)Microsoft removes cost barrier to enable wider adoption
Microsoft has now removed previous barriers by making hotpatching available at no additional cost for Azure Arc–enabled Windows Server 2025 machines. This decision was driven by customer feedback, which aims to encourage broader adoption in enterprise environments.
To enable hotpatching, servers must be running Windows Server 2025 in either the Standard or Datacenter edition and be connected to Azure Arc through the Azure Connected Machine agent. Moreover, virtualization‑based security (VBS) needs to be turned on before the feature can be activated.
After onboarding, hotpatching can be activated through multiple interfaces, including the Azure Portal, PowerShell, CLI tools, and REST APIs. Once enabled, updates are centrally managed using Azure Update Manager, which streamlines scheduling, deployment, and monitoring across large environments.
Overall, hotpatching reduces the need for frequent reboots, which helps minimize downtime and reduces overall maintenance effort. Moreover, it enables faster deployment of security updates and minimizes exposure to vulnerabilities. This feature provides unified patch management across hybrid environments to improve efficiency for IT teams.
Rabia has a master's degree in Software Engineering and she has years of experience writing professionally about Microsoft products and other technologies. Rabia has also written for OnMSFT.com as well as Windows Report. She is always up to date on t...
