Deploy updates for Microsoft Defender for Endpoint for Linux


The improved Microsoft 365 security center is now available in public preview. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. Learn what's new. This topic might apply to both Microsoft Defender for Endpoint and Microsoft 365 Defender. Refer to the Applies To section and look for specific call outs in this article where there might be differences.

Applies to:

Want to experience Defender for Endpoint? Sign up for a free trial.

Microsoft regularly publishes software updates to improve performance, security, and to deliver new features.


Each version of Defender for Endpoint for Linux has an expiration date, after which it will no longer continue to protect your device. You must update the product prior to this date. To check the expiration date, run the following command:

mdatp health --field product_expiration

To update Defender for Endpoint for Linux manually, execute one of the following commands:

RHEL and variants (CentOS and Oracle Linux)

sudo yum update mdatp

SLES and variants

sudo zypper update mdatp

Ubuntu and Debian systems

sudo apt-get install --only-upgrade mdatp