نُشر في 11 سبتمبر 2025

Windows 10 End of Support: A Migration Checklist for Industrial Fleets

هذه الصفحة متوفرة باللغة الإنجليزية فقط حالياً.

Microsoft ends free security updates for Windows 10 on 14 October 2025. In an office that is an inconvenience. On a factory floor, in a control room, or across a fleet of unattended kiosks, it is a project — because industrial systems are rarely running Windows by choice, and the application on top of them is rarely something anyone wants to touch.

If your deployment is affected, the time to plan is now, and the plan needs to start with an inventory rather than a purchase order.

What Actually Changes

The machines keep working. Nothing switches off on 14 October. What stops is the flow of security patches, and that matters differently depending on what the machine is connected to.

An air-gapped HMI driving a single machine, with no network path to anything, faces a manageable risk. A kiosk on a public network, a panel PC that reaches a corporate LAN, or anything exposed to removable media is a different proposition entirely. Unpatched Windows on a connected industrial network is how a production outage starts.

Extended Security Updates are available for Windows 10, on a paid annual basis and with escalating cost. They are a bridge, not a destination — useful for buying a year while a properly planned replacement is executed, and expensive as a standing policy.

Step 1: Inventory Before Anything Else

Most organisations discover they do not know what they have. Before you can plan, you need a list that records, for every Windows machine in the estate:

Windows edition and build — including the IoT LTSC variants, which have their own much longer support lifecycles
Processor generation and model
Whether TPM 2.0 is present and enabled
Whether the firmware is UEFI with Secure Boot available
RAM and storage
The application it runs, and who owns that application
Its network exposure
Its physical location and how hard it is to reach

That last point matters more than it looks. Replacing a desk PC is an hour. Replacing a panel PC embedded in a machine in a live production line is a shutdown window negotiated weeks in advance.

Step 2: Check the Windows 11 Requirements Honestly

Windows 11 requires TPM 2.0, UEFI with Secure Boot capability, a 64-bit processor on Microsoft's supported list, 4 GB RAM and 64 GB storage. In practice the processor list and the TPM requirement are what disqualify industrial hardware, because industrial systems have long service lives and the installed base skews old.

Anything built on Intel Celeron J1900, Braswell or similar era silicon — which covers a great deal of equipment still in daily service — is not going to Windows 11. That is not a configuration problem to be worked around; it is a hardware replacement.

Newer platforms are generally fine. Our current systems built on Intel J6412, Alder Lake-N N100, 12th/13th generation Core and Core Ultra processors ship with TPM 2.0 support and Windows 11 capability — the ITPC-A600 panel PC, the IBOX-1226 and IBOX-3226 industrial PCs, and the N1321 and N3422 mini PCs among them.

Step 3: Sort Each System into One of Four Outcomes

Upgrade in place. The hardware meets the Windows 11 requirements and the application is known to run on it. The cheapest outcome, and worth confirming before assuming anything else.

Replace the hardware. The platform is too old to upgrade. This is the common outcome for equipment purchased before roughly 2018, and it is an opportunity as much as a cost — modern replacements typically consume less power, run fanless where the originals did not, and consolidate several boxes into one.

Move to Linux. If the workload is a browser-based HMI, a signage player, a protocol gateway, a data logger or a firewall, Windows may have been incidental all along. Linux removes the licensing question and the upgrade treadmill together. Our systems support mainstream Linux distributions alongside Windows.

Isolate and accept. Some machines genuinely cannot be changed — a validated instrument, a machine tool with a vendor-locked controller, a system whose software vendor no longer exists. These stay, but they stay behind a firewall, on a segmented VLAN, with removable media controlled and remote access closed. The N1141 and N3161 are the kind of compact multi-port appliances that make that segmentation practical without rebuilding the whole network.

Step 4: Consider Windows IoT Enterprise LTSC

For embedded and fixed-function systems, the IoT LTSC editions are usually the correct answer and are routinely overlooked.

An LTSC release receives ten years of security updates and does not receive feature updates. For a kiosk, an HMI or a signage player, "no feature updates" is precisely the point: the machine does what it was commissioned to do, and it keeps doing exactly that for a decade. No new applications appear, no interface changes surprise an operator, and no unattended reboot interrupts a shift.

If you are replacing hardware anyway, specifying the right licence at the same time avoids repeating this exercise in three years.

Step 5: Test the Application, Not the Operating System

The operating system is the easy part. The risk sits in everything attached to it:

Serial and fieldbus drivers. Older RS-232/485 adapters and fieldbus cards may have no 64-bit or Windows 11 driver, and may never get one.
Vendor software. Confirm support in writing from the vendor. "It probably works" is not an answer you want to discover is wrong during commissioning.
Licence transfer. Node-locked licences tied to hardware IDs need to be re-issued, and that process can take longer than the hardware lead time.
Peripherals. Scanners, printers, cameras and card readers all have their own driver stories.

Test on one unit, in conditions as close to production as you can manage, before committing the fleet.

Step 6: Sequence by Risk

Do not migrate alphabetically. Order the work by exposure:

Internet-facing and publicly accessible systems first — kiosks, terminals, anything on a guest or shared network.
Systems on corporate networks second.
Isolated, single-purpose machines last.
Genuinely air-gapped equipment on a normal replacement cycle.

Plan the physically awkward replacements around scheduled maintenance windows, and order that hardware early. Lead times are what turn a comfortable plan into a rushed one.

Where We Can Help

We supply the hardware end of this: fanless industrial PCs, panel PCs, mini PCs and network appliances on current-generation platforms with TPM 2.0, Windows 11 and Linux support, wide-voltage DC input and the serial and Ethernet I/O that industrial applications still depend on.

If you are working through a fleet and want to sanity-check which models replace what — including whether an older panel PC can be matched dimensionally so the cut-out does not change — send us the list.

How to Choose the Right Industrial PC

Types of Industrial PCs

Industrial PCs: The Backbone of Industry 4.0 Innovation