Azure Update Manager support for CIS-Hardened Images (Windows)

CelsoScarpim 15

Hello there,

Any further update on support for CIS hardened images (Windows 2019/2022) in Azure Update Manager?

What's the recommended action if the deadline arrives and the support is not ready?

I saw somewhere else a possible option that would include using a non-cis image, enrolling it in the new Update Management Service, and then using the CIS scripts to harden the image. Is that possible/feasible/supported?

Thanks in advance.

AnuragSingh-MSFT 20,981 Reputation points

2024-05-07T12:34:01.31+00:00

@CelsoScarpim, thank you for posting this question here. I have reached out to team internally regarding this and will update this thread as soon as I have an update.
CelsoScarpim 15 Reputation points

2024-05-15T22:11:50.98+00:00

@AnuragSingh-MSFT Any update on this, please?
Arlene Reyes 0 Reputation points

2024-05-19T21:38:45.63+00:00

We too are waiting for ETA on this one. We have started migration of Arc machines to Azure Update Manager but still not sure what to do with CIS images. Hopefully, Microsoft can provide some clear guidance on what we need to do to patch CIS images.
AnuragSingh-MSFT 20,981 Reputation points

2024-05-24T10:24:29.4466667+00:00

@CelsoScarpim, Could you please share the Offer, Publisher and Sku information of the images for which you are looking for CIS hardened image? For example, consider the following screenshot:
Nikhil Mengaram 20 Reputation points Microsoft Employee

2024-05-24T11:18:09.5+00:00

Please use this form to request support https://forms.microsoft.com/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR8SQCvBHdBRGmoav-MUl5-hUNjdTUDNRWEI2TkU0Wk1STUNLVzRKREkwMS4u
AnuragSingh-MSFT 20,981 Reputation points

2024-05-28T05:51:04.0533333+00:00

CelsoScarpim, Arlene Reyes, following up to check if you had a chance to submit the information as required using the form shared by Nikhil?

1 answer

Nikhil Mengaram 20 Reputation points Microsoft Employee

2024-05-16T05:58:51.9733333+00:00

Hi CelsoScarpim,

Update manager team is working on supporting CIS hardened images in marketplace, as of now there is no ETA as validations are being made.

It is possible to use Update manager on a marketplace vm and then harden it using scripts. Note that in this case Update manager can be used but this scenario is unsupported as currently Azure Update Manager doesn't support hardened images.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

Azure Update Manager support for CIS-Hardened Images (Windows)

1 answer