Lets security fixes go on with no reboot, apart from in the quarterly baseline months. Windows Server 2025 Standard and Datacenter can get it via Azure Arc.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Hotpatch in context, with comparison tables and the common traps.
Terms in this definition
- Baseline
A formally reviewed and approved specification that may afterwards be altered only under formal change control. The word also describes the architecture as it stands today.
- Standard deployment type
A Foundry deployment type billed per token that keeps processing of prompts and responses inside the Azure geography of the resource, meeting data residency needs at lower volumes.
- Datacenter
A building packed with racked servers that has its own electricity supply, cooling and network links. Microsoft gathers these buildings into Azure regions, and as a customer you pick the region, never which building your resources land in.
- Get
Key Vault permission on secrets that allows a single secret to be read; App Service Key Vault references need nothing beyond it.
- Azure Arc
Azure service for managing servers that live outside Azure without moving them, by installing the Azure Connected Machine agent; it does not migrate anything.
Related terms
- CHPE
Windows binaries that are x86-compatible but contain native Arm64 code. To get hotpatch updates, Arm64 devices need CHPE turned off with the DisableCHPE policy.
- Windows Server 2022 Datacenter: Azure Edition
Runs only as a VM and is optimised for Azure, adding Hotpatch, SMB over QUIC and Extended Network. For the Azure appliance, the Extended Network wizard lists this edition alone.