A flaw in how Microsoft Windows Server 2008 calculates the time remaining until it must be activated could enable users to potentially run the server for years before activation. The defect is a consequence of Microsoft failing to assess its virtualization strategy, says an analyst.
At startup, Windows looks at the install date (located in the registry), and compares it to the current date. It then calculates how many minutes that is, and starts a timer in the background counting down the minutes. Once you are out of minutes - you have to activate.
The process does not run when users ‘save’ a virtual machine, or presumably use hibernation. So, if the user never shuts down or restarts, they could conceivably use Windows Server indefinitely before activating. The fix we suggested to Microsoft: have Windows recalculate the activation days remaining every few hours, or on resume from hibernation, or to when a virtual machine is resumed from a saved state.
“The timer in Windows is tracking how long the product has been used rather than how long it has been installed. However, the need for regular system maintenance that requires a restart negates the length of time a user might extend the activation deadline. Artificially protracting the activation period by saving state and not restarting could prevent important and high-priority updates that are critical to the security and reliability of your computer,” said Ward Ralston, group product manager for Windows Server.
While Microsoft suggests that users update their systems as a best practice, my take is that not everyone cares about updates - updates do not matter in a test environment without an Internet connection.
“The defect you are describing shows that everyone from vendors to IT organizations really must assess what their virtualization strategy is. This defect is clearly one of use cases involving virtualization either being overlooked or not making it in to the final test bed. In other words, this defect is a dreaded requirements failure,” said analyst Theresa Lanowitz, founder of Voke.
It is essential that software makers identify use cases and requirements that take virtualization into consideration, she added, noting that those use cases and requirements should also be incorporated into test cases. The positive side of this particular defect, she said, is that virtualization users are not being restricted on the licensing of Windows Server.
“As an industry, we will certainly see more defects related to virtualized environments and virtualized applications. The positive aspect of this is the number of innovative and creative vendors entering the market with solutions focused on virtualization at every stage,” Lanowitz said.