This page is an aggregate of all OER topics onto a single page for more convenient HTML viewing.

Windows Hardware Recommendations

Endpoints should comply with all hardware requirements for the OS you are running. Consider all processes that run on the endpoints when determining hardware configuration. Only industry standard desktop, laptop, or notebook computers and server hardware platforms are supported. Mobile and tablet require additional qualifications. Please contact VMware Carbon Black Support for additional information.

Table 1. Product: Endpoint Standard on Windows
Metric Endpoint Standard Endpoint Standard + Audit & Remediation Endpoint Standard + Enterprise EDR Endpoint Standard + Enterprise EDR + Audit & Remediation
CPU

Minimum: 1.5 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz
Memory

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+
Cores 2 2 2 2
Network required

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each 1k bytes/sec read/writes each 1k bytes/sec read/writes each
*Free disk space

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB
Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.
Table 2. Product: Audit & Remediation on Windows
Metric Endpoint Standard + Audit & Remediation Endpoint Standard + Enterprise EDR + Audit & Remediation
CPU Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported
Memory 1 GB2 GB for Windows 10/2016+ 1 GB2 GB for Windows 10/2016+
Cores 2 2
Network required Minimum: 100 MbitRecommended: 1 Gbit Minimum: 100 MbitRecommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each
Free disk space Minimum: 100 MBRecommended: 500 MB Minimum: 100 MBRecommended: 500MB
Table 3. Product: Enterprise EDR on Windows
Metric Enterprise EDR + Endpoint Standard Enterprise EDR + Endpoint Standard + Audit & Remediation
CPU Minimum: 1.8 GHz Recommended: 2 GHz Minimum: 1.8 GHz Recommended: 2 GHz
Memory 1 GB2 GB for Windows 10/2016+ 1 GB2 GB for Windows 10/2016+
Cores 2 2
Network required Minimum: 100 Mbit Recommended: 1 Gbit Minimum: 100 Mbit Recommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each
Free disk space Minimum: 100 MB Recommended: 500 MB Minimum: 100 MB Recommended: 500 MB
Table 4. Product: Prevention on Windows
Metric Prevention
CPU

Minimum: 1.5 GHz

Recommended: 2 GHz
Memory

1 GB

2 GB for Windows 10/2016+
Cores 2
Network required

Minimum: 100 Mbit

Recommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each
*Free disk space

Minimum: 200 MB

Recommended: 1 GB
Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.

Windows Operating Systems and Respective Sensors

This topic describes Carbon Black Cloud Windows Sensors and operating systems for Windows Server.

Note: For users of Carbon Black Cloud on AWS GovCloud (US), see Windows Supported Operating Systems and Sensors for AWS GovCloud (US) for system information specific to your environment.

Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.

Note: "-" indicates through and inclusive of; for example, 3.7-4.0 indicates 3.7.x through and inclusive of 4.0.x.
Important: Some sensor versions listed here may no longer be supported. Please consult the Windows Sensor Support Life Cycle Status page for information on sensor life cycle support status.
Table 5. Supported Windows Operating Systems and Respective Sensors
Operating System Architecture OS Version Sensor Version
Endpoint Standard

Audit and Remediation

Enterprise EDR

 XDR Workloads

Vulnerability Management
Windows Server 2025 x64 4.0.2 4.0.2 4.0.2 4.0.2 4.0.2 4.0.2
Windows Server 2022 x64 3.7-4.0 3.7-4.0 3.7-4.0 3.9.1-4.0 3.9-4.0 3.9-4.0
Windows Server Core 2022 x64 4.0 4.0 4.0 4.0 N/A N/A
Windows Server 2019 x64 3.2.1-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Windows Server Core 2019 x64 4.0 4.0 4.0 4.0 N/A N/A
Windows Server 2016 x64 SP0 2.1.0-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Windows Server Core 2016 x64 4.0 4.0 4.0 4.0 N/A N/A
Windows Server 2012 R2 x64 SP0 2.1.0-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Windows Server 2012 x64 SP1 2.1.0-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Windows Server 2012 x64 SP0 2.1.0-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Windows Server 2008 R2 x64 SP1 (KB4474419 patch applied) 2.1.0-4.0 3.3.0-4.0 3.4.0-4.0 3.9.1 -4.0 3.6-4.0 3.6-4.0
Note:
  • Carbon Black does not currently test the Windows sensor on Windows Server Core editions.
  • For each supported operating system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.
Important: The operating systems listed in the following table are no longer considered supported because there are no supported sensors validated to work with them.
Table 6. Unsupported Windows Operating Systems and Respective Sensors

Operating

System

 Architecture

OS

Version

 Sensor Version

Endpoint

Standard

Audit and Remediation

Enterprise EDR

 Workloads

Vulnerability Management
Windows Server 2008 x86 SP2 2.1.0-3.1.0 N/A N/A N/A N/A
Windows Server 2008 x64 2.1.0-3.1.0 N/A N/A N/A N/A
Windows Server 2008 x86 SP0, SP1 2.1.0-3.1.0 N/A N/A N/A N/A

Windows Supported Operating Systems and Sensors for AWS GovCloud (US)

The following is a list of Carbon Black Cloud Windows sensors for Windows Server. This list is specific to Carbon Black Cloud on AWS GovCloud (US).

Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.

Attention: Server testing has not been completed at this time. This page will be updated as testing results are completed. Sensor versions marked with TBD remain unverified.
Operating System Architecture OS Version Sensor Version
Endpoint Standard Audit and Remediation Enterprise EDR Workloads
Windows Server 2022 x64 TBD TBD TBD TBD
Windows Server Core 2022 x64 TBD TBD TBD TBD
Windows Server 2019 x64 TBD TBD TBD TBD
Windows Server Core 2019 x64 TBD TBD TBD TBD
Windows Server 2016 x64 SP0 TBD TBD TBD TBD
Windows Server Core 2016 x64 TBD TBD TBD TBD
Windows Server 2012 R2 x64 SP0 TBD TBD TBD TBD
Windows Server 2012 x64 SP1 TBD TBD TBD TBD
Windows Server 2012 x64 SP0 TBD TBD TBD TBD
Note:
  • Carbon Black does not currently test the Windows sensor on Windows Server Core editions.
  • For each supported operating system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.

Windows Sensor Support for osquery in Audit and Remediation

The following table shows which Carbon Black Cloud sensor versions support which versions of osquery for Audit and Remediation - Live Query.

Windows Sensor Version osquery Version
4.0.2.1540 5.12.2.0
4.0.1.1428 5.11.0
4.0.0.1292 5.9.1
3.9.2.2698 5.5.1
3.9.1.2691 5.5.1
3.9.1.2464 5.5.1
3.9.0.2357 5.5.1
3.8.0.722 5.2.3
3.8.0.684 5.2.3
3.8.0.627 5.2.3
3.8.0.535 4.8.0
3.8.0.398 4.8.0
3.7.0.1503 4.8.0
3.7.0.1411 4.7.0
3.7.0.1253 4.5.0
3.6.0.2076+ 4.5.0
3.6.0.1719+ 4.4.0
3.5.0.1627+ 4.1.2
3.4.0.1016+ 3.3.2
3.3.0.984 3.2.6
Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

Windows Sensor Support Life Cycle Status

Use the following tables to determine the product life cycle stage of your Carbon Black Cloud Windows Sensor.

The Carbon Black Cloud Product Release Life Cycle policy is located at VMware Carbon Black Cloud Support Policy.

Table 7. Windows Sensors in Status: Standard Support
Release Enter Standard Enter Extended Enter End of Support
4.0 November 2023
3.9 January 2023 May 2024 November 2024
Table 8. Windows Sensors in Status: Extended Support
Release Enter Standard Enter Extended Enter End of Support
Table 9. Windows Sensors in Status: End of Support
Release Enter Standard Enter Extended Enter End of Support
3.8 January 2022 July 2023 January 2024
3.7 June 2021 July 2022 January 2023
3.6 September 2020 January 2022 July 2022
3.5 February 2020 August 2020 February 2021
3.4 June 2019 February 2020 June 2020
3.3 December 2018 June 2019 December 2019
3.2.1 August 2018 December 2018 June 2019
3.2.0 May 2018 August 2018 February 2019
3.1.0.150 January 2018 May 2018 November 2019
3.0.1 September 2017 January 2018 July 2018
2.1.0.11 August 2017 September 2018 March 2019
2.1.0.9 July 2017 August 2018 February 2019
2.1.0.8 July 2017 July 2017 September 2017
2.0.4 May 2017 July 2017 September 2017
2.0.3 March 2017 May 2017 September 2017
2.02 January 2017 March 2017 September 2017
2.0.1.8 December 2016 January 2017 September 2017
1.0.7 January 2017 March 2017 September 2017
1.0.6 August 2016 January 2017 September 2017