This page is an aggregate of all OER topics onto a single page for more convenient HTML viewing.

Windows Hardware Recommendations

Endpoints should comply with all hardware requirements for the OS you are running. Consider all processes that run on the endpoints when determining hardware configuration. Only industry standard desktop, laptop, or notebook computers and server hardware platforms are supported. Mobile, tablet, embedded, or fixed-function devices require additional qualifications. Please contact VMware Carbon Black Support for additional information.

Requirement

Details

Additional Notes

Memory

The Agent typically uses 50-100 MB of virtual memory.

Systems running WePOS, POSReady, XP Embedded, or Embedded 7 should have at least 512 MB of physical memory.

Other supported operating systems should have at least 1 GB of physical memory.

Disk Space

The Agent requires at least 200 MB of free disk space on the system volume; 500 MB is recommended.

Actual storage requirements depend on factors such as the number of files on the computer and the Carbon Black App Control Server configuration.

If Carbon Black App Control is installed to a location other than the system volume, 100 MB of free space must be available on the installation volume.

Windows Operating Systems and Respective Agents

This topic describes Carbon Black App Control Windows Agents and operating systems for Windows Desktop.

For more information, see the VMware Carbon Black App Control Support Policy and the Windows Agent Support Life Cycle Status.

Note: - indicates through and inclusive of; for example, 7.2.1-8.7.0 indicates 7.2.1 through and inclusive of 8.7.0.
Important: Some agent versions listed here may no longer be supported. Please consult the Windows Agent Support Life Cycle Status page for information on agent life cycle support status.
Table 1. Supported Windows Operating Systems and Respective Agents

Operating System

Architecture

OS Version

Windows Agent Version (P = Patch)
Windows 11 (24H2) x64 24H2 8.9.6
Windows 11 (23H2) with Windows Core Isolation Enabled x64 23H2 8.9.x
Windows 11 (23H2) x64 23H2 8.9.x
Windows 11 (22H2) with Windows Core Isolation Enabled x64 22H2 8.7.0, 8.7.4, 8.8.0, 8.8.2, 8.9.x
Windows 11 (22H2) x64 22H2 8.7.x-8.9.x
Windows 11 (21H2) x64 21H2 8.7.2-8.9.x
Windows 10 (22H2) x86, x64 22H2 8.7.x-8.9.x
Windows 10 (21H2) x86, x64 21H2 8.6.0-8.9.x
Windows 10 May 2021 Update (21H1) x86, x64 21H1 8.1.10-8.9.x
Windows 10 October 2020 Update (20H2) x86, x64 20H2 8.1.10-8.9.x
Windows 10 May 2020 Update (20H1) x86, x64 20H1 8.1.4-8.9.x
Windows 10 November 2019 Update (19H2) x86, x64 19H2 8.1.5-8.9.x
Windows 10 May 2019 Update (19H1) x86, x64 19H1 8.1.4-8.9.x
Windows 10 October 2018 Update (Redstone 5) x86, x64 Redstone 5 8.1.0-8.9.x
Windows 10 April 2018 Update (Redstone 4) x86, x64 Redstone 4 8.0.0.P6-8.9.x
Windows 10 Fall Creators Update (Redstone 3) x64 Redstone 3 7.2.3.P6-8.9.x

x86

 Redstone 3 8.0.0.P5-8.9.x
Windows 10 Creators Update (Redstone 2) x64 Redstone 2 7.2.3.P6-8.9.x
x86 Redstone 2 8.0.0.P5-8.9.x
Windows 10 Anniversary Update (Redstone 1) x64 Redstone 1 7.2.3-8.9.x
Windows 10 x64 v1507, v1511 7.2.1.P6-8.9.x
Windows 8.1 x86, x64 SP0, Update 1, Update 2 7.2.1-8.9.x
Windows 8 x86, x64 SP0 7.2.1-8.9.x
Windows 7 x86, x64 SP1 (KB4474419 patch applied) 7.2.1-8.9.x
x86, x64 SP1 7.2.1-8.8.0*
Windows XP x86 SP3 7.2.1-8.9.x
Note: * Starting with the release of the 8.6.2 App Control Windows agent, Microsoft no longer provides SHA-1 code signing for App Control releases. Moving forward, Microsoft will only provide SHA-2 code signing for App Control releases. For customers on Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1, Microsoft provided an update providing SHA-2 support. This means customers on Windows Vista, Server 2008 SP0/SP1, Win7 SP0, and Server 2008R2 SP0 will no longer be able to install App Control following the 8.6.0 release as no such updates exist for them. We recommend customers apply the proper updates to their operating system.

Limitations and Requirements:

  • App Control does not support Windows 11 Bypass IO or CIMFS.
  • App Control does not support Shared Clustered Volumes.
Important: The operating systems listed in the following table are no longer considered supported because there are no supported agents validated to work with them.
Table 2. Unsupported Windows Operating Systems and Respective Agents

Operating System

Architecture

OS Version

Windows Agent Version (P = Patch)
Windows 7 x86, x64 SP0 N/A
Windows Vista x86, x64 SP2 7.2.1-8.0 P6
Windows Vista x86, x64 SP0, SP1 N/A

Windows Agent Communication Ports

Table 3.
Requirement Details Notes
Port 41002 From App Control Agent inbound to App Control Server on TCP port 41002 (configurable)
Port 443 From App Control Agent inbound to App Control Server on TCP port 443 for App Control Agent upgrade (Optional) Can be configured to use a Windows file server instead

Windows Agent Support Life Cycle Status

Use the following tables to determine the support life cycle stage of your VMware Carbon Black App Control Windows Agent.

See VMware Carbon Black App Control Support Policy for product life cycle information.

Table 4. Windows Agents in Status: Standard Support
Agent Version Enter Standard Enter Extended Enter End of Support
8.9.x 24 April 2023 24 October 2024 24 October 2026
Table 5. Windows Agents in Status: Extended Support
Agent Version Enter Standard Enter Extended Enter End of Support
8.8.x 20 October 2022 20 April 2024 20 April 2026
8.7.x 25 November 2021 25 May 2023 25 May 2025
8.6.x 1 April 2021 1 October 2022 1 October 2024
Table 6. Windows Agents in Status: End of Support
Agent Version Enter Standard Enter Extended Enter End of Support
8.5.x 3 November 2020 3 May 2022 3 May 2024
8.1.x 3 June 2019 3 December 2022

Windows Certificates

Make sure your root certificates are up to date and not expired.

It is also important to have your Certificate Revocation List (CRL) up to date.