Skip to content

Commit a5b7ad7

Browse files
committed
Changes as per dev review
1 parent 1864cbd commit a5b7ad7

File tree

1 file changed

+7
-31
lines changed

1 file changed

+7
-31
lines changed

defender-endpoint/linux-deploy-defender-for-endpoint-using-golden-images.md

Lines changed: 7 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: install-set-up-deploy
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 08/27/2025
18+
ms.date: 08/28/2025
1919
---
2020

2121
# Deploy Microsoft Defender for Endpoint on Linux using golden images (preview)
@@ -45,8 +45,6 @@ This guide walks you through:
4545

4646
- Install your preferred [supported Linux distribution](./mde-linux-prerequisites.md#supported-linux-distributions) and apply all necessary system updates.
4747

48-
- INSTALL REQUIRED DEPENDENCIES FOR MICROSOFT DEFENDER FOR ENDPOINT
49-
5048
1. Install Microsoft Defender for Endpoint
5149

5250
There are several methods and tools that you can use to deploy Microsoft Defender for Endpoint on Linux (applicable to AMD64 and ARM64 Linux servers):
@@ -79,45 +77,23 @@ This guide walks you through:
7977

8078
Before making a snapshot of the virtual machine, follow these steps to ensure that each clone has a unique machine identity:
8179

82-
### On-premises virtual machines
83-
84-
1. Inject a New SMBIOS UUID
85-
86-
- **KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using: uuidgen
87-
88-
- **VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
89-
90-
1. Regenerate OS Machine ID
91-
92-
Run the following commands:
93-
94-
```
95-
rm -f /etc/machine-id /var/lib/dbus/machine-id
96-
systemd-machine-id-setup
97-
dbus-uuidgen \--ensure=/var/lib/dbus/machine-id
98-
```
99-
100-
1. Validate Metadata Post-Clone
101-
102-
After cloning, verify:
103-
104-
- CloudMetadata
80+
### On-premises machines
10581

106-
- dmidecode
82+
Follow these steps for the respective virtualization platforms:
10783

108-
- sysfs values
84+
- **KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using: uuidgen
10985

110-
- Hardware GUID
86+
- **VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
11187

112-
If mismatched, update the MachineInfo and save all values back to the Microsoft Defender for Endpoint state file.
88+
Ensure that the machines are configured to have a unique hardware UUID.
11389

11490
### Cloud virtual machines
11591

11692
Cloud platforms (for example, Azure, AWS, GCP) automatically inject unique metadata and identifiers via their instance metadata services (IMDS). No manual steps are required. Microsoft Defender for Endpoint automatically detects and uses these values to generate unique machine IDs.
11793

11894
## Hostname Management
11995

120-
HOSTNAMES ARE STORED PERSISTENTLY DURING INSTALLATION. IF YOU WISH TO CHANGE THE HOSTNAME, **RESTART THE SERVICE** TO ENSURE CONSISTENT IDENTIFIER UPDATES.
96+
Hostname changes require a restart, as they are consistent while service is running.
12197

12298
## Related content
12399

0 commit comments

Comments
 (0)