Blog Post

Microsoft Defender for Endpoint Blog
2 MIN READ

Defender for Endpoint extends support to ARM-based Linux servers

Megha_Priya's avatar
Megha_Priya
Icon for Microsoft rankMicrosoft
Jan 08, 2025

As the demand for ARM64 servers continues to rise, we are thrilled to announce that Microsoft Defender for Endpoint now supports ARM64 based Linux servers in Public Preview. This update marks a new milestone in our commitment to providing comprehensive endpoint security across all devices and platforms.

ARM64 processors are rapidly gaining traction due to their exceptional efficiency and performance, particularly in data centres and cloud environments. Defender for Endpoint’s Linux solution is built specifically for Linux devices, so our protection is tailor-made with the particular needs and uses of Linux devices in mind.

What’s Included in the Public Preview?

Microsoft Defender for Endpoint for ARM-based Linux servers will support all the capabilities it currently supports on x86_64 processor-based Linux Servers:

  • Antivirus (AV) protection
  • Endpoint Detection and Response (EDR)
  • Vulnerability Management
  • Response Actions
    • Device Isolation
    • Live Response
    • AV Scan
  • Configure policies via Security Settings Management
  • Advanced Hunting

List of supported Linux distributions:

  • Ubuntu 20.04 and 22.04
  • Amazon Linux 2 and 2023

Moving forward, we will be releasing more distributions, including– RHEL, SLES, Azure Linux and more.

Get Started Today

To begin using Defender for Endpoint on Linux ARM64 devices, download the Defender for Endpoint agent version “101.24102.0002” from the insiders-slow channel. Read the guidance doc for more information.

You can choose one of the below methods to deploy Defender for Endpoint on your ARM64 servers as per your environment needs:

  • Automate Deployment using Installer Script or 3rd Party Tool – Ansible, Puppet.
  • Automate Deployment via Microsoft Defender for Cloud for Azure, AWS, GCP VMs and on-prem VMs using Azure Arc
Feedback and Support

We value your feedback and encourage you to share your experiences and any issues you may encounter. For any questions or to report bugs, please drop an email to mdearmsupport@microsoft.com with details and screenshots, if applicable.

Looking Ahead

By the time this extension is generally available (GA), we plan to extend support to all Linux distributions and capabilities that Defender for Endpoint currently supports on x86_64 architecture. Our goal is to ensure seamless integration and robust security for all Linux servers, regardless of the underlying architecture.

Updated Jan 15, 2025
Version 5.0
  • Couple of observations:

    • Ubuntu 24.04 LTS should have been supported here, it's the current release and has been out since last April; 20.04 LTS on the other hand is out of support in 3 months...
    • Linux ARM servers are a bit of a niche market?   Seems like priority should be on getting Defender for Endpoint support extended to Windows Server 2025 first before trying for more 'exotic' scenarios?