You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/linux-deploy-defender-for-endpoint-using-golden-images.md
+19-5Lines changed: 19 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
ms.topic: install-set-up-deploy
16
16
ms.subservice: linux
17
17
search.appverid: met150
18
-
ms.date: 09/02/2025
18
+
ms.date: 09/04/2025
19
19
---
20
20
21
21
# Deploy Microsoft Defender for Endpoint on Linux using golden images
@@ -78,17 +78,31 @@ This guide walks you through:
78
78
79
79
## Step 2: Prepare the golden image for cloning
80
80
81
+
When deploying Defender for Endpoint on virtual machines, the hardware UUID reported by the system (system-uuid from dmidecode) is used to uniquely identify each instance.
82
+
81
83
Before making a snapshot of the virtual machine, ensure that each virtual machine clone gets a unique hardware UUID, as described in the following sections.
82
84
83
85
### On-premises machines
84
86
85
-
For on-premises machines, make sure to configure the golden image so that each clone gets a unique hardware UUID.
87
+
For on-premises environments, configure your virtualization platform so that each clone receives a unique hardware UUID from the underlying hypervisor. Follow these guidelines:
88
+
89
+
**KVM/libvirt**
90
+
91
+
- Do not hard-code the `<uuid>` element in the virtual machine's domain XML; if it's omitted, libvirt will generate a random one at definition time.
92
+
93
+
- Alternatively, explicitly create a new UUID using `uuidgen`.
94
+
95
+
- For streamlined cloning, use `virt-clone` or `virt-manager`, which automatically assign unique UUIDs.
96
+
97
+
**VMware**
98
+
99
+
- During cloning, VMware prompts whether to keep existing UUID or to create a new one. Always select “Create”, or configure `uuid.action = "create"` in the virtual machine's *.vmx* file.
86
100
87
-
If you're using **KVM/libvirt** or **VMware/Hyper-V** as the virtualization platform, it's recommended to use the following instructions:
101
+
- In VMware Cloud Director, set `backend.cloneBiosUuidOnVmCopy = 0` to force the creation of new UUIDs.
88
102
89
-
-**KVM/libvirt**: Omit the \<uuid\> element in domain XML or set a fresh UUID using: uuidgen
103
+
**Hyper-V**
90
104
91
-
-**VMware/Hyper-V**: Enable platform settings to generate a new BIOS GUID during clone or conversion.
105
+
Hyper-V automatically generates a new hardware UUID when you create a virtual machine using Hyper-V Manager or PowerShell ([New-VM](/powershell/module/hyper-v/new-vm?view=windowsserver2025-ps)).
0 commit comments