Remove Windows Update endpoints that are no longer required post-2506.

Author: NeilBird

HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md

@@ -44,7 +44,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 36 |Azure Local authentication   | graph.microsoft.com                                | 443  | For Graph authentication and Azure Resource Bridge RBAC.                               | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 37 |Azure Local authentication   | login.windows.net                                  | 443  | For Microsoft Entra ID.                                                                | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 38 |Azure Local authentication   | australiaeast.login.microsoft.com                  | 443  | Required to fetch and update Azure Resource Manager tokens for logging into Azure.     | No                                | Deployment & Post deployment |
-| 39 |Azure Local authentication   | login.microsoft.com                                | 443  | Required to fetch and update Azure Resource Manager tokens.                            | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 39 |Azure Local authentication   | login.microsoft.com                                | 443  | Required to fetch and update Azure Resource Manager tokens.                            | No. Arc registration required     | Deployment & Post deployment |
 | 40 |Azure Local authentication   | yourhcikeyvaultname.vault.azure.net                | 443  | Key vault for deployment secrets. ENSURE THIS IS YOUR UNIQUE KEY VAULT NAME            | No                                | Deployment & Post deployment |
 | 41 |Azure Local benefits         | crl3.digicert.com                                  | 80   | Platform attestation service on Azure Local to perform a certificate revocation list.  | No                                | Deployment & Post deployment |
 | 42 |Azure Local benefits         | crl4.digicert.com                                  | 80   | Platform attestation service on Azure Local to perform a certificate revocation list.  | No                                | Deployment & Post deployment |

HCI/CanadaCentralEndpoints/canadacentral-hci-endpoints.md

@@ -71,7 +71,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 63 |Azure Local CRLs             | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions                   | No                                | Deployment & Post deployment |
 | 64 |Microsoft Update             | go.microsoft.com                                   | 443  | For Microsoft Update, allowing the OS to receive updates.                              | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 65 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | Yes. 2411 or later new deployment | Deployment & Post deployment |
-| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 67 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 68 |Azure Local AKS infra        | https://canadacentral.obo.arc.azure.com            | 8084 | Required for AKS extensions in Canada Central after initial deployment.                | No                                | Post Deployment              |
 | 69 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/EastUSendpoints/eastus-hci-endpoints.md

@@ -74,7 +74,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 66 |Azure Local CRLs             | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions.                  | No                                | Deployment & Post deployment |
 | 67 |Microsoft Update             | go.microsoft.com                                   | 443   | For Microsoft Update, allowing the OS to receive updates.                             | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 68 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | Yes. 2411 or later new deployment | Deployment & Post deployment |
-| 69 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 69 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 70 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 71 |Azure Local AKS infra        | https://eastus.obo.arc.azure.com                   | 8084 | Required for initial validation.                                                       | No                                | Post Deployment              |
 | 72 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/IndiaCentralEndpoints/IndiaCentral-hci-endpoints.md

@@ -70,7 +70,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 62 |Azure Local CRLs             | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions.                  | No                                | Deployment & Post deployment |
 | 63 |Microsoft Update             | go.microsoft.com                                   | 443   | For Microsoft Update, allowing the OS to receive updates.                             | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 64 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | No                                | Deployment & Post deployment |
-| 65 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 65 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 66 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 67 |Azure Local AKS infra        | https://centralindia.obo.arc.azure.com             | 8084 | Required for AKS extensions in Central India  after initial deployment.                | No                                | Post Deployment              |
 | 68 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/JapanEastEndpoints/japaneast-hci-endpoints.md

@@ -71,7 +71,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 63 |Microsoft Update             | go.microsoft.com                                   | 443   | For Microsoft Update, allowing the OS to receive updates.                             | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 64 |Microsoft Update             | tsfe.trafficshaping.dsp.mp.microsoft.com           | 443 | For Microsoft Update content regulation                                                 | No                                | Deployment & Post deployment |
 | 65 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | No                                | Deployment & Post deployment |
-| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 67 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 68 |Azure Local AKS infra        | https://japaneast.obo.arc.azure.com                | 8084 | Required for AKS extensions in Japan East after initial deployment.                    | No                                | Post Deployment              |
 | 69 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md

@@ -71,7 +71,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 63 |Microsoft Update                 | go.microsoft.com                                   | 443   | For Microsoft Update, allowing the OS to receive updates.                             | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 64 |Microsoft Update                 | tsfe.trafficshaping.dsp.mp.microsoft.com           | 443 | For Microsoft Update content regulation                                                 | No                                | Deployment & Post deployment |
 | 65 |Microsoft Defender               | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | No                                | Deployment & Post deployment |
-| 66 |Azure Local authentication       | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 66 |Azure Local authentication       | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 67 |Azure Local AKS infra            | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 68 |Azure Local AKS infra            | https://southcentralus.obo.arc.azure.com           | 8084 | Required for AKS extensions in South Central US after initial deployment.              | No                                | Post Deployment              |
 | 69 |Azure Local CRLs                 | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/SouthEastAsiaEndpoints/southeastasia-hci-endpoints.md

@@ -71,7 +71,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 63 |Azure Local CRLs             | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions.                  | No                                | Deployment & Post deployment |
 | 64 |Microsoft Update             | go.microsoft.com                                   | 443   | For Microsoft Update, allowing the OS to receive updates.                             | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 65 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | Yes. 2411 or later new deployment | Deployment & Post deployment |
-| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 67 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 68 |Azure Local AKS infra        | https://southeastasia.obo.arc.azure.com            | 8084 | Required for AKS extensions in SouthEast Asia after initial deployment.                | No                                | Post Deployment              |
 | 69 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/WestEuropeendpoints/westeurope-hci-endpoints.md

@@ -71,7 +71,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 63 |Azure Local CRLs             | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions.                  | No                                | Deployment & Post deployment |
 | 64 |Microsoft Update             | go.microsoft.com                                   | 443  | For Microsoft Update, allowing the OS to receive updates.                              | Yes. 2411 or later new deployment | Deployment & Post deployment |
 | 65 |Microsoft Defender           | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | Yes. 2411 or later new deployment | Deployment & Post deployment |
-| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | Yes. 2408 or later new deployment | Deployment & Post deployment |
+| 66 |Azure Local authentication   | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 67 |Azure Local AKS infra        | *.blob.storage.azure.net                           | 443 | To access blob storage.                                                                 | Yes. 2408 or later new deployment | Deployment & Post deployment |
 | 68 |Azure Local AKS infra        | https://westeurope.obo.arc.azure.com               | 8084 | Required for AKS extensions in West Europe after initial deployment.                   | No                                | Post Deployment              |
 | 69 |Azure Local CRLs             | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |

HCI/usgovvirginia-hci-endpoints/usgovvirginia-hci-endpoints.md

@@ -76,7 +76,7 @@ This page provides a comprehensive overview of the necessary endpoints for deplo
 | 68 |Azure Local CRLs                 | crl.microsoft.com/pkiinfra                         | 80   | Azure Local certificate revocation list for mandatory Arc extensions.                  | No                                | Deployment & Post deployment |
 | 69 |Microsoft Update                 | tsfe.trafficshaping.dsp.mp.microsoft.com           | 443 | For Microsoft Update content regulation                                                 | No                                | Deployment & Post deployment |
 | 70 |Microsoft Defender               | *.endpoint.security.microsoft.com                  | 443 | Required only if using Microsoft Defender extension (MDE.windows).                      | No                                | Deployment & Post deployment |
-| 71 |Azure Local authentication       | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No                                | Deployment & Post deployment |
+| 71 |Azure Local authentication       | login.microsoft.com                                | 443 | Required to fetch and update Azure Resource Manager tokens.                             | No. Arc registration required     | Deployment & Post deployment |
 | 72 |Azure Local CRLs                 | oneocsp.microsoft.com                              | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |
 | 73 |Azure Local CRLs                 | ts-crl.ws.symantec.com                             | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |
 | 74 |Azure Local CRLs                 | ts-ocsp.ws.symantec.com                            | 80  | Required for Public authorities’ certificate revocation list.                           | No                                | Deployment & Post deployment |