Note
Due to a limitation on Windows Servers, Cortex XDR agent will not register with the Microsoft Security Center.
Microsoft Trusted Signing (Azure Code Signing) Directive
Since March 2023, Microsoft request security vendors to sign binaries using Trusted Signing (formerly Azure Code Signing). As a result, Cortex XDR agent versions require a specific Microsoft Windows patch. Note that any machines without this Windows patch are not able to install or upgrade to newer versions of Cortex XDR agent. This mainly impacted Windows machines running Windows 10 or below; Windows 11 machines have this patch pre-installed. Windows 7 machines must have an extended support license in order to install the patch. Additional information about the security patch and the specific patch number required per operating system build can be found here, KB5022661. In cases where the Microsoft security patch has since expired, ACS support is achieved by installing cumulative updates after the release of the initial KB patch.
Available in agent versions 7.9.103-CE and 8.3-CE: To override the default behavior, admin must provide an MSI flag, NO_ACS_SUPPORT=1, as a parameter to the installer. This flag indicates that the installation is to be made on an ACS-unsupported operating system.
A fresh installation is needed for using this flag. On future upgrades, Cortex XDR agent will automatically detect that it is being executed on an ACS-unsupported OS and will not fail the installation.
Note
The flag cannot be provided as part of an existing Cortex XDR agent upgrade.
If upgrading from a 7.5-CE release line to 7.9-CE or 8.3-CE, even without explicitly providing the installer flag, the installer will detect that ACS is unsupported and will treat the installation as if the flag was given.
Note
Cortex XDR agent 7.9 was the last version to support Windows 7. Release 7.9.103-CE gives extended support until December 31, 2026. No new capabilities will be developed for these OS versions.
Cortex XDR Agent Version | ||
|---|---|---|
Windows 7 Operating System | 8.0 and later versions | 7.9.103‑CE |
RTM | — | — |
Windows 7 SP1 (All editions except Home) | — | ✓ |
Embedded Standard 7 SP1 | — | ✓ |
Embedded POSReady 7 (Based on Windows 7 SP1) | — | ✓ |
Note
All Windows 8 variants were supported until January 2023 (Microsoft EOL + 3 years). Release 7.9-CE, up to release 7.9.102-CE, offers support for Windows 8.1 until March 19, 2025. No new capabilities will be developed for these OS versions.
The extended-life agent 7.9.103-CE does not support Windows 8.1
Cortex XDR Agent Version | |||
|---|---|---|---|
Windows 8 Operating System | 8.0 and later versions | 7.9.103-CE | 7.9‑CE (up to release 7.9.102-CE) |
8.1 (and with FIPS mode) | — | — | ✓ |
Embedded 8.1 Professional (Supported until January 2023) | — | — | ✓ |
Note
Release 7.9-CE, up to release 7.9.102-CE, supports Windows 10 until March 19, 2025.
The extended-life agent 7.9.103-CE does not support Windows 10.
The Enterprise edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Cortex XDR Agent Version | ||||||
|---|---|---|---|---|---|---|
Windows 10 Operating System | 8.7 | 8.6 | 8.5 | 8.3-CE | 7.9-CE (up to release 7.9.102-CE) | 7.9.103‑CE |
Threshold LTSB, Redstone LTSB, Redstone 5 LTSB, 19H2, 20H1, 20H2, 21H1, 21H2, 22H2 | ✓ | ✓ | ✓ | ✓ | ✓ | — |
Windows 10 IoT Core Windows 10 IoT Enterprise | ✓ | ✓ | ✓ | ✓ | ✓ | — |
Note
Release 7.9-CE, up to release 7.9.102-CE, supports Windows 11 until March 19, 2025.
The extended-life agent 7.9.103-CE does not support Windows 11.
The Enterprise edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Cortex XDR Agent Version | ||||||
|---|---|---|---|---|---|---|
Windows 11 Operating System | 8.7 | 8.6 | 8.5 | 8.3‑CE | 7.9-CE (up to release 7.9.102-CE) | 7.9.103‑CE |
Update 24H2 | ✓ | ✓ | ✓ From agent release 8.5.0.3639 | ✓ From agent release 8.3.100.53457 | — | — |
Update 23H2 | ✓ | ✓ | ✓ | ✓ | — | — |
Update 22H2 | ✓ | ✓ | ✓ | ✓ | ✓ | — |
Note
Release 7.9-CE, up to release 7.9.102-CE, supports Windows Server until March 19, 2025.
The extended-life agent 7.9.103-CE supports Windows Server 2008 R2 until December 31, 2026.
The Datacenter edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Cortex XDR Agent Version | ||||||
|---|---|---|---|---|---|---|
Windows Server | 8.7 | 8.6 | 8.5 | 8.3-CE | 7.9-CE | 7.9.103‑CE |
2025 | ✓ | ✓ From agent release 8.6.0.3704 | ✓ From agent release 8.5.0.3639 | ✓ From agent release 8.3.100.53457 | — | — |
2022 | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2019 LTSC 2019 Core | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2016 | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2012 (Supported until October 2026) 2012 R2 (Supported until October 2026) | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2012 Core | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2008 R2 SP1 | — | — | — | — | ✓ | ✓ |