End-of-support timeline 2024 to 2028 for Windows and Linux fleets
The dates that matter most for Windows and Linux fleets through 2028 are Windows Server 2016 end of support on January 12, 2027, Salt 3006 losing critical fixes in June 2027, Salt 3008 LTS critical fixes ending in June 2028, and standalone VMware Tanzu Salt support ending in October 2028. WSUS has been deprecated since September 2024.
- Jan 12, 2027Windows Server 2016 extended support ends
- Jun 2027Salt 3006 LTS loses critical fixes
- Oct 2028standalone Tanzu Salt support ends
Fleet tools change under you on someone else's schedule. These are the dates, oldest first, each with what it means and where the details are.
Which dates affect Windows and Linux fleets?
#| Date | What happened or happens | What to do | Source | Details |
|---|---|---|---|---|
| January 2024 | SaltStack SecOps stops being sold standalone | Move STIG and CIS compliance off the add-on | Broadcom product notices | SecOps replacement |
| June 30, 2024 | CentOS Linux 7 reaches end of life; RHEL 7 leaves maintenance support | Move to RHEL 8 or 9, Rocky, or AlmaLinux, or buy extended support | Red Hat: CentOS Linux end of life, RHEL 7 end of maintenance | Linux patch management |
| September 20, 2024 | Microsoft deprecates WSUS: it keeps working, with no new features | Plan a Windows update tool that also covers Linux | Microsoft announcement | WSUS alternative |
| October 2024 | Tanzu Guardrails, SecOps' listed replacement, reaches end of life | Same as above | Broadcom product notices | SecOps replacement |
| Late 2024 | Salt packages move from repo.saltproject.io to packages.broadcom.com | Fix install scripts and pin versions | Salt Project repo migration | Install Salt in 2026 |
| 2025 | Perforce moves Puppet packages to a private repository; a commercial license is needed past 25 nodes; OpenVox forks | Choose a license, OpenVox, or a move | DevClass report | Puppet options |
| May 2025 | Broadcom's SaltStack program terms: licensed per CPU core, 16-core minimum per processor | Price your next renewal early | Broadcom program terms (May 2025) | Tanzu Salt end of support |
| May 20, 2025 | Uyuni closes its Windows support request as not planned | Pick one console for Windows and Linux | Uyuni issue #1937 | Uyuni and Windows |
| October 14, 2025 | Windows 10 reaches end of support | Upgrade to Windows 11 or enroll in Extended Security Updates; find every Windows 10 machine first | Microsoft lifecycle: Windows 10 | Windows patch management |
| October 14, 2025 | Exchange Server 2016 and 2019 reach end of support | Move mailboxes or isolate the servers; keep patching what remains | Exchange 2016, Exchange 2019 | Windows patch management |
| July 13, 2026 | DoD pauses CMMC Phase 2 (third-party assessments); Phase 1 self-assessments and SPRS scores stay required | Keep your SPRS score true and tied to evidence | CMMC rule, 32 CFR Part 170 | What still applies |
| July 14, 2026 | SQL Server 2016 extended support ends | Upgrade, buy Extended Security Updates, or retire | Microsoft lifecycle: SQL Server 2016 | Windows patch management |
| October 13, 2026 | The last year of Extended Security Updates for Windows Server 2012 and 2012 R2 ends | Retire or upgrade every 2012 server | Microsoft ESU FAQ | Windows patch management |
| January 12, 2027 | Windows Server 2016 extended support ends | Upgrade, buy Extended Security Updates, or retire | Microsoft lifecycle: Windows Server 2016 | Server 2016 plan |
| June 2027 | Salt 3006 LTS loses critical fixes | Move masters and agents to Salt 3008 LTS | Salt support lifecycle | Salt 3006 end of life |
| June 2028 | Salt 3008 LTS critical fixes end | Plan the next Salt LTS | Salt support lifecycle | Salt 3006 to 3008 |
| October 2028 | Standalone VMware Tanzu Salt support ends | Move to a supported console on open-source Salt | Broadcom KB 413088 | Tanzu Salt alternative |
Last checked November 7, 2026. We re-check every date each quarter.
How does Gardience handle these dates?
#- Salt releases. Gardience runs on Salt 3006, 3007, and 3008 LTS side by side, so masters and agents move to 3008 one group at a time.
- Windows Server 2016, 2012, and Windows 10. Every machine on an ending version is listed with its patch state until you retire it, and its evidence stays in the record.
- WSUS and SecOps. Windows and Linux patching, CVE matching with CISA KEV, a STIG/CIS-aligned baseline, DISA STIG checklists for Linux, and CMMC evidence are built in, with no add-on to buy.
Questions
#When does VMware Tanzu Salt support end?
#Broadcom's KB 413088 gives standalone Tanzu Salt an end of support of October 2028, or the end of your contract, whichever comes first.
Is WSUS being removed?
#No. It is deprecated: it keeps working and gets no new features. Microsoft points server customers to Azure Update Manager.
When should we move from Salt 3006 to 3008?
#Before June 2027, when Salt 3006 LTS loses critical fixes. Salt 3007 is already out of active support.
Read more
- Windows Server 2016 end of support (Jan 12, 2027): what to do
- Salt 3006 end of life: planning the move to Salt 3008 LTS
- Broadcom Tanzu Salt end of support (Oct 2028): your options
- WSUS deprecated: what Microsoft recommends and what it costs
- Open-source Puppet after Perforce: your options in 2026
- SaltStack SecOps is gone: STIG and CIS compliance on Salt now
- repo.saltproject.io is gone: install and pin Salt in 2026
- CMMC Phase 2 is paused: what defense suppliers still owe
Try Gardience on your own machines
One supported console for Windows and Linux on open-source Salt: patching, a scored STIG/CIS-aligned baseline, drift repair, event-driven automation, two-person approval and a tamper-evident audit log. Flat yearly pricing, not per node.
Free 90-day trial (25 nodes)See it work Compare