Skip to content

Commit 93efc6d

Browse files
committed
Remove Windows Update endpoints that are no longer required post-2506. - Minor fixes
1 parent 04f8d9a commit 93efc6d

4 files changed

Lines changed: 10 additions & 10 deletions

File tree

HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -73,13 +73,13 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
7373
| 65 |Microsoft Defender | *.endpoint.security.microsoft.com | 443 | Required only if using Microsoft Defender extension (MDE.windows). | Yes. 2411 or later new deployment | Deployment & Post deployment |
7474
| 66 |Azure Local AKS infra | *.blob.storage.azure.net | 443 | To access blob storage. | Yes. 2408 or later new deployment | Deployment & Post deployment |
7575
| 67 |Azure Local AKS infra | https://australiaeast.obo.arc.azure.com | 8084 | Required for AKS extensions in Australia East after initial deployment. | No | Post Deployment |
76-
| 68 |Azure Local CRLs | oneocsp.microsoft.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
77-
| 69 |Azure Local CRLs | ts-crl.ws.symantec.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
78-
| 70 |Azure Local CRLs | ts-ocsp.ws.symantec.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
79-
| 71 |Azure Local CRLs | s.symcd.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
80-
| 72 |Azure Local CRLs | ocsp.digicert.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
81-
| 73 |Azure Local CRLs | ocsp.globalsign.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
82-
| 74 |Azure Local CRLs | ocsp2.globalsign.com | 80 | Required for Public authorities' certificate revocation list. | No | Deployment & Post deployment |
76+
| 68 |Azure Local CRLs | oneocsp.microsoft.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
77+
| 69 |Azure Local CRLs | ts-crl.ws.symantec.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
78+
| 70 |Azure Local CRLs | ts-ocsp.ws.symantec.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
79+
| 71 |Azure Local CRLs | s.symcd.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
80+
| 72 |Azure Local CRLs | ocsp.digicert.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
81+
| 73 |Azure Local CRLs | ocsp.globalsign.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
82+
| 74 |Azure Local CRLs | ocsp2.globalsign.com | 80 | Required for Public authorities certificate revocation list. | No | Deployment & Post deployment |
8383
| 75 |Azure Local AKS infra | hciarcvmsstorage.z13.web.core.windows.net | 443 | Storage account for stack-hci-vm CLI extension files. | Yes. 2411 or later new deployment | Deployment & Post deployment |
8484
| 76 |Azure Local AKS infra | www.msftconnecttest.com/connecttest.txt | 80 | Bootstrap Windows outbound connectivity validation | No | Deployment |
8585
| 77 |Azure Local AKS infra | edgesupprd.trafficmanager.net | 443 | Remote Support Extension | Yes. 2408 or later new deployment | Deployment & Post deployment |

HCI/EastUSendpoints/eastus-hci-endpoints.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
3636
| 28 |Azure Local Arc agent | guestnotificationservice.azure.com | 443 | For the notification service for extension and connectivity scenarios. | Yes. 2408 or later new deployment | Deployment & Post deployment |
3737
| 29 |Azure Local Arc agent | gbl.his.arc.azure.com | 443 | For global metadata and hybrid identity services. | No. Arc registration required | Deployment & Post deployment |
3838
| 30 |Azure Local Arc agent | eus.his.arc.azure.com | 443 | For East US metadata and hybrid identity services. | No. Arc registration required | Deployment & Post deployment |
39-
| 31 |Azure Local Arc agent | eastus-gas.guestconfiguration.azure.com | 443 | For extension management and guest configuration services in Australia East. | Yes. 2408 or later new deployment | Deployment & Post deployment |
39+
| 31 |Azure Local Arc agent | eastus-gas.guestconfiguration.azure.com | 443 | For extension management and guest configuration services in East US. | Yes. 2408 or later new deployment | Deployment & Post deployment |
4040
| 32 |Azure Local Arc agent | agentserviceapi.guestconfiguration.azure.com | 443 | For notification service for extension and connectivity scenarios. | Yes. 2408 or later new deployment | Deployment & Post deployment |
4141
| 33 |Azure Local Arc agent | azgn*.servicebus.windows.net | 443 | Not required if endpoint 41 below is whitelisted. | Yes. 2408 or later new deployment | Deployment & Post deployment |
4242
| 34 |Azure Local Arc agent | *.servicebus.windows.net | 443 | For multiple Azure Local components. | Yes. 2408 or later new deployment | Deployment & Post deployment |

HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
44

55
**This list was last updated on November 27th, 2025** - Review GitHub History and PRs for detailed information.
66

7-
| Id | Azure Local Component | Endpoint URL | Port | Notes | Arc gateway support | Required |
7+
| Id | Azure Local Component | Endpoint URL | Port | Notes | Arc gateway support | Required for |
88
|----|---------------------------------|----------------------------------------------------|------|----------------------------------------------------------------------------------------|-----------------------------------|------------------------------|
99
| 1 |Azure Local AKS infra | mcr.microsoft.com | 443 | Global site used for official Microsoft artifacts such as container images. | Yes. 2408 or later new deployment | Deployment & Post deployment |
1010
| 2 |Azure Local AKS infra | westus.data.mcr.microsoft.com | 443 | West US site used for official Microsoft artifacts such as container images. | Yes. 2408 or later new deployment | Deployment & Post deployment |

HCI/usgovvirginia-hci-endpoints/usgovvirginia-hci-endpoints.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
5454
| 46 |Azure Local authentication | graph.windows.net | 443 | For Graph authentication, token fetch, and validation. | No | Deployment & Post deployment |
5555
| 47 |Azure Local authentication | graph.microsoft.com | 443 | For Graph authentication and Azure Resource Bridge RBAC. | No | Deployment & Post deployment |
5656
| 48 |Azure Local authentication | login.windows.net | 443 | For Microsoft Entra ID. | No | Deployment & Post deployment |
57-
| 49 |Azure Local authentication | login.microsoftonline.us | 443 | Required to fetch and update ARM tokens for logging into East Us Azure. | No | Deployment |
57+
| 49 |Azure Local authentication | login.microsoftonline.us | 443 | Required to fetch and update ARM tokens for logging into US Gov Virginia Azure. | No | Deployment |
5858
| 50 |Azure Local authentication | usgovvirginia.login.microsoftonline.us | 443 | Required to fetch and update Azure Resource Manager tokens for logging into Azure. | No | Deployment & Post deployment |
5959
| 51 |Azure Local benefits | crl3.digicert.com | 80 | Platform attestation service on Azure Local to perform a certificate revocation list. | No | Deployment & Post deployment |
6060
| 52 |Azure Local benefits | crl4.digicert.com | 80 | Platform attestation service on Azure Local to perform a certificate revocation list. | No | Deployment & Post deployment |

0 commit comments

Comments
 (0)