Skip to content

Commit 2b3a2db

Browse files
committed
Text formatting
1 parent 81d531d commit 2b3a2db

File tree

1 file changed

+34
-32
lines changed

1 file changed

+34
-32
lines changed

defender-endpoint/linux-deploy-dfs-using-golden-images.md

Lines changed: 34 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -34,17 +34,25 @@ This guide walks you through:
3434

3535
- Ensuring unique identifiers for each VM instance.
3636

37-
- Specific steps for cloud and on-premises environments
37+
- Specific steps for cloud and on-premises environments.
3838

39-
## Step-by-Step: Installing MDE on a Golden Image
39+
By following this guide, you can confidently deploy Microsoft Defender for Endpoint on Linux using golden images across cloud and on-premises environments. This ensures:
4040

41-
1. Prepare the Base VM
41+
- Unique and consistent device identifiers.
42+
43+
- Reliable telemetry.
44+
45+
- Smooth device correlation in the security portal.
46+
47+
## Step-by-step: Installing Microsoft Defender for Endpoint on a golden image
48+
49+
1. Prepare the case VM
4250

4351
- Install your preferred Linux distribution.
4452

4553
- Apply all necessary system updates.
4654

47-
- Install required dependencies for MDE.
55+
- Install required dependencies for Microsoft Defender for Endpoint.
4856

4957
1. Install Microsoft Defender for Endpoint
5058

@@ -74,55 +82,49 @@ This guide walks you through:
7482
mdatp health
7583
```
7684

77-
## Preparing the Golden Image for Cloning
78-
79-
Before snapshotting the VM, follow these steps to ensure each clone will have a unique machine identity:
80-
81-
**On-Premises VMs**
85+
## Preparing the golden image for cloning
8286

83-
**A. Inject a New SMBIOS UUID**
87+
Before snapshotting the virtual machine, follow these steps to ensure that each clone will have a unique machine identity:
8488

85-
- **KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using:
89+
### On-premises virtual machines
8690

87-
- uuidgen
91+
1. Inject a New SMBIOS UUID
8892

89-
- **VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
93+
- **KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using: uuidgen
9094

91-
**B. Regenerate OS Machine ID**
95+
- **VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
9296

93-
Run the following commands:
97+
1. Regenerate OS Machine ID
9498

95-
rm -f /etc/machine-id /var/lib/dbus/machine-id
99+
Run the following commands:
96100

97-
systemd-machine-id-setup
98-
99-
dbus-uuidgen \--ensure=/var/lib/dbus/machine-id
101+
```
102+
rm -f /etc/machine-id /var/lib/dbus/machine-id
103+
systemd-machine-id-setup
104+
dbus-uuidgen \--ensure=/var/lib/dbus/machine-id
105+
```
100106

101-
**C. Validate Metadata Post-Clone**
107+
1. Validate Metadata Post-Clone
102108

103-
After cloning, verify:
109+
After cloning, verify:
104110

105-
- CloudMetadata
111+
- CloudMetadata
106112

107-
- dmidecode
113+
- dmidecode
108114

109-
- sysfs values
115+
- sysfs values
110116

111117
- Hardware GUID
112118

113119
If mismatched, update the MachineInfo and save all values back to the MDE state file.
114120

115-
**Cloud VMs**
116-
117-
Cloud platforms (e.g., Azure, AWS, GCP) automatically inject unique metadata and identifiers via their instance metadata services (IMDS). No manual steps are required.
118-
119-
MDE will automatically detect and use these values to generate unique machine IDs.
121+
### Cloud virtual machines
120122

121-
**Hostname Management**
123+
Cloud platforms (e.g., Azure, AWS, GCP) automatically inject unique metadata and identifiers via their instance metadata services (IMDS). No manual steps are required. Microsoft Defender for Endpoint automatically detects and uses these values to generate unique machine IDs.
122124

123-
- Hostnames are now stored persistently during installation.
125+
## Hostname Management
124126

125-
- If you wish to change the hostname, **restart the service** to ensure consistent identifier updates.
127+
Hostnames are stored persistently during installation. If you wish to change the hostname, **restart the service** to ensure consistent identifier updates.
126128

127129
**Summary**
128130

0 commit comments

Comments
 (0)