Windows 11 IoT Enterprise LTSC 2024: Editions, Licensing and Support Dates

Windows 11 IoT Enterprise LTSC is the long-term servicing edition of Windows 11 for fixed-purpose devices such as industrial PCs, kiosks, HMIs, medical equipment and digital signage. The current release, Windows 11 IoT Enterprise LTSC 2024, is supported by Microsoft until October 2034, receives security and quality updates but no feature updates, and is licensed per device through the OEM channel rather than sold in shops.

Those three facts, a ten-year life, a frozen feature set and device-bound licensing, are why industrial buyers choose it. A line-side computer or a self-service terminal needs to behave the same way in year eight as it did on the day it was validated, and it should not change its user interface, add apps or restart for a feature update in the middle of a shift.

Microsoft has developed Windows since 1985, from the Start menu and taskbar of Windows 95 through Windows CE, its first operating system for embedded devices, in 1996, to Windows 10 IoT Enterprise in 2015 and Windows 11 IoT Enterprise today. With mainstream Windows 10 support ended in October 2025, most new industrial PC projects now start on Windows 11. This guide compares the editions, sets out support dates and hardware requirements, explains licensing tiers, the certificate of authenticity and lockdown features, and covers how we build and image Windows IoT Enterprise systems for deployment.

Four editions come up in almost every industrial project. They share the same Windows 11 core, but differ in how they are serviced, how long they are supported, how they are licensed and what hardware they need.

For an industrial computer the choice is usually between the first two columns. Windows 11 IoT Enterprise LTSC suits equipment that is validated once and then left alone: machine HMIs, test stations, medical devices, kiosks and signage players. The GA channel version of IoT Enterprise suits devices that need newer Windows features during their life and have an IT team ready to test and roll out an annual update. Enterprise LTSC has the same frozen feature set but half the support period and is bought through volume licensing, so it is rarely the right fit for a product that ships with the hardware. Our FAQ on what Windows IoT Enterprise is covers the family in brief.

Windows 11 IoT Enterprise is full Windows: the same drivers, the same Win32 and .NET applications and the same management tools as a desktop PC. What it adds is the licensing terms and servicing options for dedicated devices, plus the device lockdown features that let one machine do one job.

Security. BitLocker drive encryption, Secure Boot, Windows Defender Application Control and credential protection are included. BitLocker encrypts the drive so data cannot be read if the computer or its SSD is removed, and Secure Boot checks that only signed firmware and boot loaders run. Both work best with a TPM, which most of our systems carry as a discrete chip or as firmware TPM such as Intel Platform Trust Technology.

Lockdown. Assigned Access limits a device to a single app, suited to a kiosk or a point-of-sale terminal. Shell Launcher replaces the Windows desktop with your own application. Unified Write Filter protects the drive by redirecting writes to an overlay, so a restart returns the system to a known state. Keyboard Filter blocks key combinations such as Ctrl+Alt+Del, and unbranded boot hides Windows boot screens.

Management. Mobile device management, Windows Update for Business and Group Policy let a fleet of devices be configured, updated and monitored remotely, which matters for devices spread across many sites or mounted where they are hard to reach. Many of our systems also offer out-of-band management through Intel vPro or a baseboard controller, which works even when Windows is not running.

Hardware and cloud. IoT Enterprise runs on x86 and, from LTSC 2024, Arm64 processors, supports large memory, GPUs and NPUs for AI workloads, and connects to Azure IoT and other cloud services for data collection and device management.

Windows 11 IoT Enterprise LTSC 2024 became available on 1 October 2024 and is supported until 10 October 2034. Mainstream support ends on 9 October 2029; from then until 2034 Microsoft continues to issue security updates. The non-IoT Windows 11 Enterprise LTSC 2024 edition ends on 9 October 2029, which is the main practical difference between the two. The dates below are taken from Microsoft’s lifecycle pages; check the current pages before committing a product plan, because Microsoft occasionally revises them.

The GA channel works differently. Each annual Windows 11 release is supported for 36 months on Enterprise and IoT Enterprise, and for 24 months on Pro and Home, so devices on those editions need a feature update roughly every two or three years to stay supported.

Hardware life usually matters as much as the operating system. An industrial computer is often expected to run for seven to ten years, which our article on how long computers last discusses; pairing a long-life board with LTSC lets both reach the end of a project together.

Windows 10 Home, Pro, Enterprise and IoT Enterprise in the GA channel reached end of support on 14 October 2025. Devices on those editions no longer receive security updates unless they are enrolled in Microsoft’s paid Extended Security Updates programme. Devices on Windows 10 IoT Enterprise LTSC are in a different position: LTSC 2019 is supported until January 2029 and LTSC 2021 until January 2032, so many industrial fleets have years left on their current image.

Moving between LTSC releases is a project in its own right. In-place upgrades are possible in some cases, but most industrial fleets re-image with a new, validated build and revalidate the application, because drivers, security baselines and lockdown settings all need checking. A new LTSC release generally needs its own licence, so confirm the licensing position with your supplier before planning the work.

Windows 11 Pro, Enterprise and the GA channel of IoT Enterprise share Microsoft’s standard Windows 11 requirements: a 1 GHz or faster 64-bit processor with at least two cores from Microsoft’s supported list, 4 GB of memory, 64 GB of storage, UEFI firmware with Secure Boot capability, TPM 2.0, a DirectX 12 compatible graphics processor and, on devices with a screen, a display larger than 9 inches at 720p or better.

Windows 11 IoT Enterprise LTSC 2024 relaxes several of these, recognising that many embedded devices have no display, small storage or older security hardware. TPM 2.0, Secure Boot and a display become optional, and the memory and storage minimums are lower. Microsoft’s current table is summarised below; check its requirements page for the latest version and the full processor list.

Optional does not mean unimportant. BitLocker with automatic unlock, Windows Hello and measured boot all need a TPM, and Secure Boot is the first line of defence against boot-level malware. We recommend keeping both on any connected device, and every new system we build has them. The relaxed requirements are most useful for older hardware, very small boards and headless controllers. Our explainers on UEFI and firmware TPM go further, and our guide to 32-bit vs 64-bit explains why Windows 11 is 64-bit only.

For an industrial build, the requirements that matter most are the ones Microsoft does not list: an operating temperature range that suits the site, a wide-range DC input, storage rated for continuous writes and a board with a long availability commitment. Those decide whether the system is still running when its ten years of LTSC support are up.

Yes. Windows 11 IoT Enterprise LTSC 2024 is the first LTSC release to support Arm64 processors, alongside x86. That opens Windows to low-power Arm boards built on Qualcomm processors, where the long battery life, integrated NPU and cellular options of mobile processors suit handheld, signage and smart camera devices. Native Arm64 builds of the application give the best results; x64 applications run under emulation with some performance cost, and drivers must be native Arm64.

Most industrial projects still run on x86, where driver support for I/O cards, cameras and fieldbus interfaces is widest. Our comparison of x86 and Arm for industrial and embedded systems sets out the trade-offs.

Windows IoT licences are priced in three tiers, Entry, Value and High End, set by the device’s processor. All three include the same features and the same support; the tier only reflects the processor class, so check the device’s processor against Microsoft’s list before ordering. In simple terms, Entry covers low-power processors, Value covers mid-range processors and High End covers high-performance processors.

When Windows activates with a digital licence, it checks the device’s hardware hash to confirm a legitimate installation. Each licence carries a 25-character product key, but where Microsoft once issued a separate key for each tier, today’s licences use a common key for the operating system, so matching the tier to the hardware is the responsibility of whoever orders the licence. Microsoft’s technical documents carry the full processor list, and our team can confirm the tier for any system we supply. The table summarises common processors from our range of embedded systems.

Newer processor names, such as Intel Core Ultra and Core Series 2, are added to Microsoft’s list as they launch, so we confirm their tier with the distributor at the time of order rather than assuming it from the model number.

Windows IoT licences are proved by a certificate of authenticity (COA), a label fixed to the device that carries the licence’s product key. It shows the operating system on the device is genuine and licensed, links the physical device to its licence and gives an auditor something to check. On deployments at scale, COA labels also make it easier to track licences across a fleet. Microsoft updates the label design from time to time, so the label you receive may look different from the examples below.

There are two ways to apply product keys during manufacture. With a one-to-one key, each device gets the unique key printed on its own COA. With a one-to-many key, sometimes called a company key, the device builder uses a single key across many devices after signing a customer licence agreement with an authorised distributor. In both cases the legal licence is the COA, not the key, so every device still needs its own licence.

Not off the shelf. Windows 11 IoT Enterprise is licensed through Microsoft’s OEM channel: authorised IoT distributors sell licences to device makers and system integrators, who pre-install the operating system and supply the licence with each device. Licences cannot be bought separately in shops, and keys offered for sale on their own are unlikely to be valid for production use.

The licence terms also matter. IoT Enterprise is licensed for dedicated, fixed-purpose devices: an HMI, a test station, a kiosk or a medical device, rather than a general office PC used for email and documents. A device used as a general-purpose PC needs a standard Windows licence. For projects that do not ship with the hardware, such as a fleet of PCs inside a large organisation, Windows 11 Enterprise LTSC through volume licensing is the usual route.

We are an integrator, so the licence comes with the system: we install Windows 11 IoT Enterprise LTSC on the computer, apply the licence, fit the COA and record it against the serial number.

Windows 11 Pro is the edition for individual users, small businesses and professional environments. For a handful of systems that do not need the lockdown features or ten-year servicing of IoT Enterprise LTSC, it can be a simpler choice, and unlike Windows 11 Home it can host Remote Desktop sessions for secure remote access and support.

Pro includes Hyper-V for running virtual machines and Windows Sandbox for testing untrusted software in a temporary, isolated environment that is wiped when it closes. It includes BitLocker drive encryption, and its management tools cover small fleets: mobile device management for remote configuration and policy, Windows Update for Business for controlling when updates install, and Assigned Access for single-app devices. It also supports more memory and processor sockets than Home.

The trade-offs for an industrial device are servicing and licensing. Pro takes an annual feature update, each supported for 24 months, so the device changes over its life and has to be retested. It lacks Shell Launcher, Unified Write Filter and Keyboard Filter. And for a device built into a product, the IoT Enterprise licence terms are the ones written for that use. In practice we recommend Pro for engineering workstations and one-off systems, and IoT Enterprise LTSC for anything shipped as part of a machine or deployed in numbers.

The edition decides how Windows is serviced; the hardware decides whether the device lasts. For a fixed-purpose device on LTSC, we match the processor to the workload and the licence tier, then check the points that keep a system running unattended for a decade.

Beyond the processor, the checks are the same ones that matter for any embedded system: an operating temperature range with margin over the site, a wide-range DC input with protection, industrial-grade SSDs sized for continuous writes, a watchdog timer, a TPM for BitLocker and a board with a long availability commitment. Our guide to embedded computers covers these in more detail, and our introduction to Intel Core Ultra explains the NPU options.

Security is part of the build too. Devices on OT networks increasingly have to meet IEC 62443 requirements, and the EU Cyber Resilience Act adds obligations for products sold in Europe. LTSC’s long security servicing helps, but a hardened image, a support plan for patches and a record of what is installed on each device matter as much. Our IEC 62443-4-2 hardware security checklist sets out the device-level requirements.

These systems list Windows 11 IoT Enterprise LTSC support in their manufacturers’ specifications, and cover the three licence tiers. We install and license the operating system, configure BIOS, drivers and lockdown settings, image your application and test each system before it ships, so it arrives ready to deploy.

Processors at the low end of the range, such as the Intel Processor N family, usually fall in the Entry tier, which keeps the licence cost of signage players and gateways down. For devices managed remotely, out-of-band management lets a technician reach the system even when Windows will not start; our article on managing industrial PCs out of band shows how. Where a project needs Linux instead, the same hardware usually supports embedded Linux too.