Skip to content

Remove Windows Update endpoints that are no longer required post-2506. #716

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
NeilBird wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Remove Windows Update endpoints that are no longer required post-2506. #716

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
04f8d9a
Remove Windows Update endpoints that are no longer required post-2506.
NeilBird Jul 14, 2026
93efc6d
Remove Windows Update endpoints that are no longer required post-2506…
NeilBird Jul 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
147 changes: 72 additions & 75 deletions HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

147 changes: 72 additions & 75 deletions HCI/CanadaCentralEndpoints/canadacentral-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

151 changes: 74 additions & 77 deletions HCI/EastUSendpoints/eastus-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

147 changes: 72 additions & 75 deletions HCI/IndiaCentralEndpoints/IndiaCentral-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

149 changes: 73 additions & 76 deletions HCI/JapanEastEndpoints/japaneast-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

151 changes: 74 additions & 77 deletions HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

147 changes: 72 additions & 75 deletions HCI/SouthEastAsiaEndpoints/southeastasia-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

147 changes: 72 additions & 75 deletions HCI/WestEuropeendpoints/westeurope-hci-endpoints.md
View file
Open in desktop

Large diffs are not rendered by default.

30 changes: 14 additions & 16 deletions HCI/usgovvirginia-hci-endpoints/usgovvirginia-hci-endpoints.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
| 46 |Azure Local authentication | graph.windows.net | 443 | For Graph authentication, token fetch, and validation. | No | Deployment & Post deployment |
| 47 |Azure Local authentication | graph.microsoft.com | 443 | For Graph authentication and Azure Resource Bridge RBAC. | No | Deployment & Post deployment |
| 48 |Azure Local authentication | login.windows.net | 443 | For Microsoft Entra ID. | No | Deployment & Post deployment |
| 49 |Azure Local authentication | login.microsoftonline.us | 443 | Required to fetch and update ARM tokens for logging into East Us Azure. | No | Deployment |
| 49 |Azure Local authentication | login.microsoftonline.us | 443 | Required to fetch and update ARM tokens for logging into US Gov Virginia Azure. | No | Deployment |
| 50 |Azure Local authentication | usgovvirginia.login.microsoftonline.us | 443 | Required to fetch and update Azure Resource Manager tokens for logging into Azure. | No | Deployment & Post deployment |
| 51 |Azure Local benefits | crl3.digicert.com | 80 | Platform attestation service on Azure Local to perform a certificate revocation list. | No | Deployment & Post deployment |
| 52 |Azure Local benefits | crl4.digicert.com | 80 | Platform attestation service on Azure Local to perform a certificate revocation list. | No | Deployment & Post deployment |
Expand All @@ -73,18 +73,16 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
| 65 |Azure Local monitoring | gcs.monitoring.core.usgovcloudapi.net | 443 | Used for metrics and monitoring telemetry traffic. | No | Deployment & Post deployment |
| 66 |Azure Local monitoring | adhs.events.data.microsoft.com | 443 | Used for metrics and monitoring telemetry traffic. | No | Deployment & Post deployment |
| 67 |Azure Local monitoring | v20.events.data.microsoft.com | 443 | Used for metrics and monitoring telemetry traffic. | No | Deployment & Post deployment |
| 68 |Azure Local Updates | fe3.delivery.mp.microsoft.com | 443 | For updating Azure Local. | No | Deployment & Post deployment |
| 69 |Azure Local Updates | fe3cr.delivery.mp.microsoft.com | 443 | For updating Azure Local. | No | Deployment & Post deployment |
| 70 |Azure Local Updates | tlu.dl.delivery.mp.microsoft.com | 80 | For updating Azure Local. | No | Deployment & Post deployment |
| 71 |Azure Local CRLs | crl.microsoft.com/pkiinfra | 80 | Azure Local certificate revocation list for mandatory Arc extensions. | No | Deployment & Post deployment |
| 72 |Microsoft Update | tsfe.trafficshaping.dsp.mp.microsoft.com | 443 | For Microsoft Update content regulation | No | Deployment & Post deployment |
| 73 |Microsoft Defender | *.endpoint.security.microsoft.com | 443 | Required only if using Microsoft Defender extension (MDE.windows). | No | Deployment & Post deployment |
| 74 |Azure Local authentication | login.microsoft.com | 443 | Required to fetch and update Azure Resource Manager tokens. | No | Deployment & Post deployment |
| 75 |Azure Local CRLs | oneocsp.microsoft.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 76 |Azure Local CRLs | ts-crl.ws.symantec.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 77 |Azure Local CRLs | ts-ocsp.ws.symantec.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 78 |Azure Local CRLs | s.symcd.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 79 |Azure Local CRLs | ocsp.digicert.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 80 |Azure Local CRLs | ocsp2.globalsign.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 81 |Azure Local AKS infra | edgesupprd.trafficmanager.net | 443 | Remote Support Extension | No | Deployment & Post deployment |
| 82 |Azure Local AKS infra | azurewatsonanalysis-prod.core.windows.net | 443 | Used for metrics and monitoring telemetry traffic. | No | Deployment & Post deployment |
| 68 |Azure Local CRLs | crl.microsoft.com/pkiinfra | 80 | Azure Local certificate revocation list for mandatory Arc extensions. | No | Deployment & Post deployment |
| 69 |Microsoft Update | tsfe.trafficshaping.dsp.mp.microsoft.com | 443 | For Microsoft Update content regulation | No | Deployment & Post deployment |
| 70 |Microsoft Defender | *.endpoint.security.microsoft.com | 443 | Required only if using Microsoft Defender extension (MDE.windows). | No | Deployment & Post deployment |
| 71 |Azure Local authentication | login.microsoft.com | 443 | Required to fetch and update Azure Resource Manager tokens. | No | Deployment & Post deployment |
| 72 |Azure Local CRLs | oneocsp.microsoft.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 73 |Azure Local CRLs | ts-crl.ws.symantec.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 74 |Azure Local CRLs | ts-ocsp.ws.symantec.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 75 |Azure Local CRLs | s.symcd.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 76 |Azure Local CRLs | ocsp.digicert.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 77 |Azure Local CRLs | ocsp.globalsign.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 78 |Azure Local CRLs | ocsp2.globalsign.com | 80 | Required for Public authorities’ certificate revocation list. | No | Deployment & Post deployment |
| 79 |Azure Local AKS infra | edgesupprd.trafficmanager.net | 443 | Remote Support Extension | No | Deployment & Post deployment |
| 80 |Azure Local AKS infra | azurewatsonanalysis-prod.core.windows.net | 443 | Used for metrics and monitoring telemetry traffic. | No | Deployment & Post deployment |