You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/linux-deploy-dfs-using-golden-images.md
+34-32Lines changed: 34 additions & 32 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,17 +34,25 @@ This guide walks you through:
34
34
35
35
- Ensuring unique identifiers for each VM instance.
36
36
37
-
- Specific steps for cloud and on-premises environments
37
+
- Specific steps for cloud and on-premises environments.
38
38
39
-
## Step-by-Step: Installing MDE on a Golden Image
39
+
By following this guide, you can confidently deploy Microsoft Defender for Endpoint on Linux using golden images across cloud and on-premises environments. This ensures:
40
40
41
-
1. Prepare the Base VM
41
+
- Unique and consistent device identifiers.
42
+
43
+
- Reliable telemetry.
44
+
45
+
- Smooth device correlation in the security portal.
46
+
47
+
## Step-by-step: Installing Microsoft Defender for Endpoint on a golden image
48
+
49
+
1. Prepare the case VM
42
50
43
51
- Install your preferred Linux distribution.
44
52
45
53
- Apply all necessary system updates.
46
54
47
-
- Install required dependencies for MDE.
55
+
- Install required dependencies for Microsoft Defender for Endpoint.
48
56
49
57
1. Install Microsoft Defender for Endpoint
50
58
@@ -74,55 +82,49 @@ This guide walks you through:
74
82
mdatp health
75
83
```
76
84
77
-
## Preparing the Golden Image for Cloning
78
-
79
-
Before snapshotting the VM, follow these steps to ensure each clone will have a unique machine identity:
80
-
81
-
**On-Premises VMs**
85
+
## Preparing the golden image for cloning
82
86
83
-
**A. Inject a New SMBIOS UUID**
87
+
Before snapshotting the virtual machine, follow these steps to ensure that each clone will have a unique machine identity:
84
88
85
-
-**KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using:
89
+
### On-premises virtual machines
86
90
87
-
- uuidgen
91
+
1. Inject a New SMBIOS UUID
88
92
89
-
-**VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
93
+
-**KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using: uuidgen
90
94
91
-
**B. Regenerate OS Machine ID**
95
+
-**VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
92
96
93
-
Run the following commands:
97
+
1. Regenerate OS Machine ID
94
98
95
-
rm -f /etc/machine-id /var/lib/dbus/machine-id
99
+
Run the following commands:
96
100
97
-
systemd-machine-id-setup
98
-
99
-
dbus-uuidgen \--ensure=/var/lib/dbus/machine-id
101
+
```
102
+
rm -f /etc/machine-id /var/lib/dbus/machine-id
103
+
systemd-machine-id-setup
104
+
dbus-uuidgen \--ensure=/var/lib/dbus/machine-id
105
+
```
100
106
101
-
**C. Validate Metadata Post-Clone**
107
+
1. Validate Metadata Post-Clone
102
108
103
-
After cloning, verify:
109
+
After cloning, verify:
104
110
105
-
- CloudMetadata
111
+
- CloudMetadata
106
112
107
-
- dmidecode
113
+
- dmidecode
108
114
109
-
- sysfs values
115
+
- sysfs values
110
116
111
117
- Hardware GUID
112
118
113
119
If mismatched, update the MachineInfo and save all values back to the MDE state file.
114
120
115
-
**Cloud VMs**
116
-
117
-
Cloud platforms (e.g., Azure, AWS, GCP) automatically inject unique metadata and identifiers via their instance metadata services (IMDS). No manual steps are required.
118
-
119
-
MDE will automatically detect and use these values to generate unique machine IDs.
121
+
### Cloud virtual machines
120
122
121
-
**Hostname Management**
123
+
Cloud platforms (e.g., Azure, AWS, GCP) automatically inject unique metadata and identifiers via their instance metadata services (IMDS). No manual steps are required. Microsoft Defender for Endpoint automatically detects and uses these values to generate unique machine IDs.
122
124
123
-
- Hostnames are now stored persistently during installation.
125
+
## Hostname Management
124
126
125
-
- If you wish to change the hostname, **restart the service** to ensure consistent identifier updates.
127
+
Hostnames are stored persistently during installation. If you wish to change the hostname, **restart the service** to ensure consistent identifier updates.
0 commit comments