Microsoft SQL Server 2005 - End of Life - April 12, 2016

Number: IN16-001
Date: 16 March 2016

Purpose

The purpose of this Information Note is to draw attention to the end of life for Microsoft SQL Server 2005. Effective April 12, 2016 Microsoft will no longer provide automatic fixes, security updates, or online technical assistance for this product. to

Assessment

As of April 12, 2016, Microsoft will no longer support SQL Server 2005.  Organizations running software after its end of support date may be exposed to outage, compliance and security risks.  Hardware and software compatibility issues may also arise when implementing current technologies which may not have been designed for use with SQL Server 2005.

Migration to newer versions of SQL Server can present unique challenges and it is critical that those organizations operating SQL Server 2005 plan and test a migration solution before the deadline.

Applications may have compatibility issues with more recent versions of SQL Server.
CCIRC recommends that the planning for the migration of databases that include the following items:

Organizations will need to identify all infrastructure, application and hardware dependencies when planning SQL Server database migration. The Microsoft Assessment and Planning Toolkit (MAP) can be used to discover SQL Server instances within an organization’s network and assess readiness. The SQL Server Upgrade Advisor has the ability to perform a detailed analysis of SQL Server installations and their respective configurations to identify possible known issues that may affect the upgrade process.

Suggested Action

CCIRC strongly encourages Information Technology owners and operators to begin planning their migration to an updated SQL Server 2005 database system as soon as possible. CCIRC will continue to monitor this situation and update this Information Note accordingly.

References:

Note to Readers

In support of Public Safety's mission to build a safe and resilient Canada, CCIRC's mandate is to help ensure the security and resilience of the vital non-federal government cyber systems that underpin Canada's national security, public safety and economic prosperity. As Canada's computer security incident response team, CCIRC is Canada's national coordination centre for the prevention and mitigation of, preparedness for, response to, and recovery from cyber incidents on non-federal government systems. It does this by providing authoritative advice and support, and coordinating information sharing and incident response.

Please note, CCIRC PGP key has recently been updated.
http://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/_fl/CCIRCPublicPGPKey.txt

For general information, please contact Public Safety Canada's Public Affairs division at:

Telephone: 613-944-4875 or 1-800-830-3118
Fax: 613-998-9589
E-mail: ps.communications-communications.sp@canada.ca

Date modified: