Note
Due to a limitation on Windows Servers, Cortex XDR agent will not register with the Microsoft Security Center.
Microsoft Trusted Signing (Azure Code Signing) Directive
Since March 2023, Microsoft request security vendors to sign binaries using Trusted Signing (formerly Azure Code Signing). As a result, Cortex XDR agent versions require a specific Microsoft Windows patch. Note that any machines without this Windows patch are not able to install or upgrade to newer versions of Cortex XDR agent. This mainly impacted Windows machines running Windows 10 or below; Windows 11 machines have this patch pre-installed. Windows 7 machines must have an extended support license in order to install the patch. Additional information about the security patch and the specific patch numbers required per operating system build, KB5022661/KB4474419 . In cases where the Microsoft security patch has since expired, ACS support is achieved by installing cumulative updates after the release of the initial KB patch.
Available in agent versions 7.9.103-CE and 8.3-CE: To override the default behavior, admin must provide an MSI flag, NO_ACS_SUPPORT=1, as a parameter to the installer. This flag indicates that the installation is to be made on an ACS-unsupported operating system. A fresh installation is needed for using this flag.
Note
The NO_ACS_SUPPORT flag cannot be provided as part of an existing Cortex XDR agent upgrade.
If upgrading from a 7.5-CE release line to 7.9-CE or 8.3-CE, even without explicitly providing the installer flag, the installer will detect that ACS is unsupported and will treat the installation as if the flag was given.
Later versions of Cortex XDR agent automatically detect an ACS-unsupported OS and allow the installation to complete successfully.
Note
Cortex XDR agent 7.9 was the last version to support Windows 7. Release 7.9.103-CE gives extended support until December 31, 2026. No new capabilities will be developed for these OS versions.
Cortex XDR Agent Version | ||
|---|---|---|
Windows 7 Operating System | 8.0 and later versions | 7.9.103‑CE |
RTM | — | — |
Windows 7 SP1 (All editions except Home) | — | ✓ |
Embedded Standard 7 SP1 | — | ✓ |
Embedded POSReady 7 (Based on Windows 7 SP1) | — | ✓ |
All Windows 8 variants were supported until January 2023 (Microsoft EOL + 3 years). Release 7.9-CE, up to release 7.9.102-CE, offered support for Windows 8.1 until March 19, 2025. No new capabilities will be developed for these OS versions.
The extended-life agent 7.9.103-CE does not support Windows 8.1
The Enterprise edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Cortex XDR Agent Version | ||||||
|---|---|---|---|---|---|---|
Windows 10 Operating System | 9.0 | 8.9 | 8.8 | 8.7-CE | 8.7 | 8.3-CE |
Threshold LTSB, Redstone LTSB, Redstone 5 LTSB, 21H2, 22H2 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
19H2, 20H1, 20H2, 21H1 | — | — | ✓ | ✓ | ✓ | ✓ |
Windows 10 IoT Core Windows 10 IoT Enterprise | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
The Enterprise edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Cortex XDR Agent Version | ||||||
|---|---|---|---|---|---|---|
Windows 11 Operating System | 9.0 | 8.9 | 8.8 | 8.7-CE | 8.7 | 8.3‑CE |
Update 25H2 x86_64 and ARM | ✓ | — | — | — | — | — |
Update 24H2 x86_64 and ARM | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ From agent release 8.3.100.53457 |
Update 23H2 x86_64 and ARM | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Update 22H2 x86_64 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Note
Windows running on ARM is subject to certain limitations, see Known limitations in the latest Cortex XDR agent release notes.
The Datacenter edition is tested for compatibility. Unless specifically stated otherwise, assume that all sub-editions are also compatible.
Note
Release 7.9-CE, up to release 7.9.102-CE, was supported Windows Server until March 19, 2025.
The extended-life agent 7.9.103-CE supports Windows Server 2008 R2 SP1 until December 31, 2026.
Cortex XDR Agent Version | |||||||
|---|---|---|---|---|---|---|---|
Windows Server | 9.0 | 8.9 | 8.8 | 8.7‑CE | 8.7 | 8.3-CE | 7.9.103‑CE |
2025 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ From agent release 8.3.100.53457 | — |
2022 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2019 LTSC 2019 Core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2016 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2012 (Supported until October 2026) 2012 R2 (Supported until October 2026) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2012 Core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
2008 R2 SP1 | — | — | — | — | — | — | ✓ |