Updated: February 2020
SQL Server 2008 and SQL Server 2008 R2 have now left Extended Support and no longer receive security updates. This blog and infographic explain what this means and how unsupported products can affect your business:
Microsoft products have:
Mainstream Support provides customers with bug fixes and security updates, while products on Extended Support only receive security fixes. This enables products to remain compliant.
Once a product has moved beyond Extended Support, Microsoft no longer has an obligation to provide security updates.
SQL Server 2008 was released ten years ago and there have been four subsequent SQL servers launched since SQL Server 2008 R2, however its popularity seems to have endured.
This is due to four main reasons:
Choosing to run applications on an unsupported platform carries several important risks that your organisation must consider:
Now that SQL Server 2008 and SQL Server 2008 R2 have moved out of Extended Support, they will no longer receive security updates. Without patching vulnerabilities, your data will be at risk from cyberattack. While physical security measures such as a firewall or anti-virus software may provide some protection, this is unlikely to be enough for most organisations to be confident if they are hosting sensitive data.
With increased security risks comes the danger of becoming non-compliant. Many industry regulations and standards, such as GDPR and PCI DSS, require organisations to use supported platforms. Retailers accepting card or online payments are required to maintain vendor support and inability to demonstrate this could render them unable to process card payments in line with their obligations. Non-compliance has real legal and financial implications for your business, along with the risk of a loss of reputation or damaged relationships with your customers.
Maintaining unsupported platforms comes with a high price. Microsoft generally discourage customers from running out of support software by charging a premium for Extended Security Updates to detract customers from this approach. In the first year the annual cost of this is expected to be 75% of the licence cost.
Organisations must maintain their software assets and modernising the underlying data platform is part of this journey. Many organisations already use database compatibility levels to mimic behaviour of down-level versions to avoid code fixes required by more modern servers.
To ensure your organisation remains supported, we’re recommending our proven methodology with the following four-step process: