Windows 10 compatibility with our products

Environment

Microsoft Windows 10 version 21H2

Microsoft Windows 10 version 21H1
Microsoft Windows 10 version 20H2 (October 2020 Update)
Microsoft Windows 10 version 2004 (May 2020 Update)
Microsoft Windows 10 version 1909 (November 2019 Update)
Microsoft Windows 10 version 1903 (May 2019 Update)
Microsoft Windows 10 version 1809 (October 2018 Update)
Microsoft Windows 10 version 1803 (April 2018 Update)
Microsoft Windows 10 version 1709 (Fall Creators Update)
Microsoft Windows 10 version 1703 (Creators Update)
Microsoft Windows 10 version 1607 (Anniversary Update)
Microsoft Windows 10 version 1511 (November Update)
Microsoft Windows 10 version 1507

Summary

Recent updates to this article

Date	Comments
April 24, 2024	Updated the compatibility of DLP Endpoint minimum version with Windows versions.
April 18, 2024	Removed the row pertaining to ACC 8.3.2 under the "Compatibility with Windows 10 Hardware-enforced Stack Protection (HSP)" section.
January 18, 2024	Added a note about HSP being supported with ENS September 2023 or later on AMD Zen 5 CPUs.
November 27, 2023	Added HSP for Win 10 Version 21H1/21H2 and DLP Endpoint compatibility details under the section "Compatibility with Windows 10 Hardware-enforced Stack Protection (HSP)."

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

The versions listed in this article are the minimum supported product versions for each Windows 10 version. For detailed product compatibility information, see the supported platforms article for the product.

Compatibility with Windows 10

Contents:

Click to expand the section that you want to view.

Compatibility with Windows 10 Versions 1903, 1909, 2004, 20H2, 21H1, 21H2 and 22H2

We're committed to supporting the Microsoft release cadence for Windows 10. We work closely with Microsoft to make sure that our security software and hardware products are fully compatible with Windows 10 endpoints.

For release quality, all new releases that Microsoft publishes for Windows 10 require full validation by the individual product teams. Our goal is to add same-day support for all Windows 10 releases over time for products that don't currently offer this cadence.

Changes to the schedule can occur if either of the below is satisfied:

Late-breaking changes implemented by Microsoft to the Windows release occur.
Any unresolved compatibility issues are raised by us with Microsoft around a scheduled release.

NOTES:

We send information regarding Windows 10 support with our products using our standard communication methods, including the Support Notification Service.
Future release dates are subject to change.

NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.
GA = General Availability
RTS = Released To Support, also called Managed Release. To obtain RTS packages, contact Technical Support.
To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.
- If you are a registered user, type your User ID and Password, and then click Log In.
- If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.
Also, see the articles below:
- KB51560 - On-premises product release cycle
- KB50473 - Support statement for verifying and validating Microsoft patches

Compatibility with Windows 10 Versions 1903, 1909, 2004, 20H2, 21H1, and 21H2

Products	Win 10 Version 1903 May 2019 Update	Win 10 Version 1909 November 2019 Update	Win 10 Version 2004 May 2020 Update	Win 10 Version 20H2 October 2020 Update	Win 10 Version 21H1	Win 10 Version 21H2	Win 10 Version 22H2	Supported Platforms Article
	Minimum Supported Product Version
Endpoint Protection Products¹
Active Response	2.4.0 HF5	2.4.1.150	2.4.3.359	2.4.4.403	2.4.4	2.4.4	2.4.4 (GA)	KB84473
Application and Change Control (ACC)	8.2.1 Update 5 (8.2.1.435)	8.2.1 Update 5 (8.2.1.435)	8.3.0 8.2.6	8.3.2	8.3.2	8.3.3	8.3.4 8.3.5	KB87944
CLS	7.0.0	7.0.0	7.0.0	7.0.0	7.0.0	7.0.0	TBA	KB94726
Data Loss Prevention Endpoint (DLP Endpoint)	11.6.700 and later	11.6.700 and later	11.6.700 and later	11.6.700 and later	11.6.700 and later	11.6.700 and later	11.6.700 and later	KB68147
Endpoint Security (ENS)	10.6.1 July Update Repost⁴ 10.5.5 July Update Repost⁴ 10.6.1 May Update⁴ 10.5.5 May Update⁴	10.7.0 10.6.1 July Update Repost 10.5.5 July Update Repost	10.7.0 April 2020 Update 10.6.1 April 2020 Update	10.7.0 September 2020 Update 10.6.1 September 2020 Update	10.7.0 February 2021 Update 10.6.1 February 2021 Update	10.7.0 September 2021 Update 10.6.1 September 2021 Update	10.7.0 June 2022 Update 10.6.1 Feb 2022 Update	KB82761
Endpoint Product Removal tool	21.2	21.2	21.2	21.2	21.2	21.8	21.8	KB91978
ENS for Servers	5.2.0	5.2.0	5.2.0	5.2.0	5.2.0	TBD	TBD	KB90138
Endpoint Intelligence Agent (EIA)	n/a	n/a	3.2.2	3.2.2	3.2.4	TBD	TBD	KB84500
Endpoint Upgrade Assistant	2.4	2.5	2.7	2.9	2.10	2.11	2.12	KB90170
Host Intrusion Prevention System (Host IPS)	8.0 Patch 13	8.0 Patch 13	8.0 Patch 15	8.0 Patch 16	8.0 Patch 16	Not supported	Not supported	KB70778
MVISION Endpoint	1904 (19.4.x)	1910 (19.10.x)	2004 (20.4.x)	2009 (20.9.x)	2104 (21.4.x)	2109 (21.9.x)	2210 (22.10.x)	KB90744
MVISION Endpoint Detection and Response	3.0.0.355	3.0.0.432	3.1.0.482.2	3.2.0.567	3.4	3.5.2.1100	EDR 3.5.2 and later	KB91345
SSSO tool	20.8	20.8	21.4	21.4	21.9	21.9	TBD	KB92519
SiteAdvisor Enterprise (SAE)	3.5 Patch 6	3.5 Patch 6	3.5 Patch 6	3.5 Patch 6	3.5.0 Patch 6	Not supported	Not supported	KB51244
Threat Intelligence Exchange (TIE) Module for VirusScan Enterprise (VSE)	1.0.3.134	1.0.3.134	1.0.3.134	1.0.3.134	1.0.3.134.1	Not supported	Not supported	KB51111
VirusScan Command Line Scanner (VSCL)	6.1.0	6.1.0	6.1.3	6.1.3	6.1.5	Not supported	Not supported	KB52944
VSE	8.8 Patch 13	8.8 Patch 13	8.8 Patch 15	8.8 Patch 16	8.8 Patch 16	Not supported	Not supported	KB51111
Data Center Protection Products
Management for Optimized Virtual Environment (MOVE) AV Multi-Platform	4.8	4.8.1	4.8.1 Update 1	4.8.1 Update 1	4.9.1	4.9.1	4.10	KB74865
Data Protection Products
Drive Encryption (DE)^{2, 3}	7.2.8	7.2.8	7.2.8	7.2.8	7.2.8	7.2.8	7.28	KB79422
File and Removable Media Protection (FRP)³	5.0.10	5.1.0 5.0.10	5.2.0 5.1.0 5.0.10	5.3.0 5.2.0 5.1.0 5.0.10	5.1.0	5.1.0	5.10	KB81149
Management of Native Encryption (MNE)	5.0.0 4.1.5	5.0.0 4.1.5	5.0.0 4.1.5	5.1.0 5.0.0 4.1.5	5.1.1 5.0.0 4.1.5	4.1.5	4.15	KB79375
Security Management Products
Data Exchange Layer (DXL)⁵	5.0.1	5.0.1	5.0.1	5.0.1	6.0.3	TBD	TBD	KB90421 DXL KB51573 MA
McAfee Agent (MA)	5.6.0.940 5.5.0 5.0.5	5.6.0 5.5.1	5.6.0 5.5.1	5.6.0 5.5.1	5.7.2	5.7.3	5.7.3	KB51573
Policy Auditor (PA)	6.4.1	6.4.3.290	6.4.3.290	6.5 6.4	6.5.0.263	6.5.1.229	6.5.3 6.5.4	KB72961
Rogue System Detection (RSD)	5.0.5	5.0.6.125	5.0.6.125 5.0.5.130	5.0.6	5.0.6	TBD	TBD	KB82323
Web Protection Products
Client Proxy	2.4.0	2.4.0 2.5.0 2.5.1 3.0.0	3.1.0	3.2.0 3.1.0	4.1.0	4.1.5	4.15	KB74182

n/a = not available
HF = Hotfix
TBD = To be decided

¹	SaaS Endpoint Protection 6.0 doesn't support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it. If you're running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.7. ENS 10.7 supports Windows 10.0.
²	IMPORTANT: Same-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later. Run setup.exe when setup.exe is initiated from the Microsoft WSUS mechanism. There's no need for scripts or command-line arguments. For DE 7.1.3 and 7.2.0 and later, the reflect drivers parameter must be used when executing setup.exe directly. See the related articles below: KB89000 - How to upgrade the operating system to Windows 10 with Drive Encryption 7.2.1 or later installed—If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options. KB87909 - How to upgrade the operating system to Windows 10 Anniversary Update with Drive Encryption 7.2 or 7.1 Patch 3 Hotfix 1148978 In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Update 3 (7.1.3) or FRP 5.0.1 installed is supported. But, it requires specific steps be taken as part of the Windows 10 upgrade for it to be successful. For details, see KB87550 - How to upgrade the operating system to Windows 10 with File and Removable Media Protection installed. DEGO deployment to Windows 10 clients fails. This issue is resolved by installing DE 7.1 Update 3 Hotfix 1087719 (build 7.1.3.554) or later.
³	See KB86009 - Support for Device Guard and Credential Guard on Windows 10 with encryption products.
⁴	On a system with Windows 10 version 1903 (May 2019 Update): ENS 10.5.5 (July Update Repost) and ENS 10.6.1 (July Update Repost) installers allow a fresh installation of ENS. ENS 10.5.5 or 10.6.1(May Update) only allow an upgrade to Windows 10 version 1903 (May 2019 Update).
⁵	Starting with DXL 5.0.0, the DXL client is bundled with MA. Thus, the MA version determines the supported Windows operating system versions.

Back to top

Compatibility with Windows 10 Versions 1507, 1511, 1607, 1703, 1709, 1803, and 1809

Windows 10 devices running versions listed below no longer receive security and quality updates. Microsoft recommends updating devices to the latest version of Windows 10.

For more information, see the Windows lifecycle fact sheet.

Compatibility with Windows 10 Versions 1507 ,1511, 1607, 1703, 1709, 1803, and 1809 (end-of-service)

Products	Win 10 Version 1507	Win 10 Version 1511 (November Update)	Win 10 Version 1607 (Anniversary Update)⁸	Win 10 Version 1703 (Creators Update)⁹	Win 10 Version 1709 (Fall Creators Update)	Win 10 Version 1803 (April 2018 Update)	Win 10 Version 1809 (October 2018 Update)
Products	Minimum Supported Product Version
Endpoint Protection Products¹
Active Response	1.1.0 HF1.1.0.161	1.1.0 HF1.1.0.161	1.1.0.212	2.01 2.0	2.0.1	2.2	2.3
ACC	7.0	7.0	7.0.1	7.0.1⁶ 8.0.x	8.0.x	8.0.1¹⁰ 8.1.0¹⁰	8.2.1 8.0
DLP Endpoint	11.0	11.0	11.0	11.0	11.0.130	11.0.300	11.0.600
ENS	10.1 (major release) 10.0.1 (update)	10.1 (major release) 10.0.1 (update)	10.2 10.1.2	10.5.1 10.2.1	10.5.3 10.2.2	10.5.4 10.6.0	10.5.5 10.6.1
ENS Adaptive Threat Protection (ATP)	10.5.1	10.5.1	10.5.1	10.5.2	10.5.3	10.5.4 10.6.0	10.5.5 10.6.1
ENS Threat Intelligence	n/a	n/a	10.2 10.1 Update 2	10.2.2	n/a	2.6.0	2.6.0
Host IPS	8.0.0 Patch 6	8.0.0 Patch 6	8.0 Patch 8	8.0 Patch 9	8.0 Patch 10	8.0 Patch 11	8.0 Patch 12
MVISION Endpoint	n/a	n/a	n/a	n/a	1808 (18.8.x)	1808 (18.8.x)	1808 October Update (18.9.x)
SAE	3.5 Patch 4⁴	3.5 Patch 4⁴	3.5 Patch 5	3.5 Patch 5	3.5 Patch 5	3.5 Patch 6	3.5 Patch 6
Threat Intelligence for ENS Client	10.1	10.1	n/a	n/a	n/a	n/a	n/a
TIE Module for VSE	1.0.1	1.0.1	1.0.2	1.0.2	1.0.2	1.0.2	1.0.2
VSCL	6.0.6	6.0.6	6.1.0	6.1.0	6.1.0	6.1.0	6.1.0
VSE	8.8.0 Patch 6	8.8.0 Patch 6	8.8.0 Patch 8	8.8 Patch 9	8.8 Patch 10	8.8 Patch 11	8.8 Patch 12
Data Center Protection Products
MOVE Multi-platform	3.6.1	3.6.1	4.6 4.5	4.6 4.5	4.6 4.5	4.7 4.6 4.5	4.8
Data Protection Products
DE^{2, 5}	7.1.3	7.1.3	7.2.0 7.1.3 HF1148978	7.2.1	7.2.2	7.2.4	7.2.5
FRP⁵	5.0.x 4.3.1 HF1062118³	5.0.x 4.3.1 HF1062118³	5.0.2 5.0.1 HF1150417	5.0.3⁷	5.0.4	5.0.5	5.0.5
MNE	3.0.0	3.0.0	4.1.0	4.1.1	4.1.1	4.1.3	4.1.3
Security Management Products
DXL	2.0.0	2.0.1	2.2.0	3.1.0	4.0.0	4.1.0	5.0.0 4.1.2 4.0.0 Hotfix 8
MA	5.0.2 4.8.0 Update 3	5.0.2 4.8.0 Update 3	5.0.4 4.8.0 Update 3	5.0.5 4.8.0 Update 3	5.0.5 4.8.0 Update 3	5.5.0 5.0.5 4.8.0 Update 3	5.5.0 5.0.5 4.8.0 Update 3
PA Agent	6.2.0.309	6.2.0.2309	6.2.0.309	6.2.2	6.3 6.2.2	6.3 6.2.2	6.4.1 6.4 6.3 6.2.2
RSD	5.0.3	5.0.3	5.0.4	5.0.5	5.0.5	5.0.5	5.0.5
Web Protection Products
Client Proxy	2.1	2.1	2.1.0.177	2.3	2.3.3	2.3.4	2.3.5

¹	SaaS Endpoint Protection 6.0 doesn't support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it. If you're running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.7. ENS 10.7 supports Windows 10.0.
²	IMPORTANT: Same-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later. Run setup.exe when setup.exe is initiated from the Microsoft WSUS mechanism. There's no need for scripts or command-line arguments. For DE 7.1.3 and 7.2.0 and later, the reflect drivers parameter must be used when executing setup.exe directly. See the articles below: KB87909 - How to upgrade the operating system to Windows 10 Anniversary Update with Drive Encryption 7.2 or 7.1 Patch 3 Hotfix 1148978 KB89000 - How to upgrade the operating system to Windows 10 with Drive Encryption 7.2.1 or later installed — If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options. In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Update 3 (7.1.3) or FRP 5.0.1 installed is supported. But, it requires specific steps be taken as part of the Windows 10 upgrade for it to be successful. For details, see KB87550 - How to upgrade the operating system to Windows 10 with File and Removable Media Protection installed. DEGO deployment to Windows 10 clients fails. This issue is resolved by installing DE 7.1 Update 3 Hotfix 1087719 (build 7.1.3.554) or later.
³	This hotfix is available on the Product Downloads site as a separate item on the FRP 4.3.1 download page.
⁴	SAE 3.5 Update 4 HF1076106 adds support for Mozilla Firefox.
⁵	For more information, see KB86009 - Support for Device Guard and Credential Guard on Windows 10 with encryption products.
⁶	ACC 7.0.1 is supported only if Microsoft KB4103722 or KB4103731 or the latest updates are installed before installation.
⁷	A minimum Windows 10 Creators Update Version 1703 (operating system build 15063.250) is needed for support with FRP 5.0.3. For more information, see Microsoft article KB4016240. CAUTION: Installation or upgrade with earlier builds of Windows 10 Creators Update fails.
⁸	KB87536 has been redirected to this article because KB87536 became obsolete. (KB87536 was titled "Incompatibility between the Windows 10 Anniversary Update and multiple McAfee Enterprise products.") The Windows 10 Anniversary Update now performs the needed upgrade and installation checks. These checks make sure that no incompatible product versions can be installed or present. It also blocks the upgrade if they're present.
⁹	CAUTION: Before you install our products, if Device Guard or Credential Guard is enabled on a Windows 10 Creators Update 64-bit system, you must make sure that Microsoft KB4016251 is installed on the system.
¹⁰	ACC 8.0.1 and 8.1.0 are supported only if Microsoft KB4103721 or the latest updates are installed before installation.

Back to top

Compatibility with Windows 10 Hardware-enforced Stack Protection (HSP)

This section describes our support for Windows 10 HSP. For more information about HSP, see this Microsoft article on HSP. HSP allows applications to use the local CPU hardware to protect their code while running inside the CPU memory. HSP only works on chipsets with Intel Control-flow Enforcement Technology (Intel CET). For more information, see this Intel article on CET.

Products	HSP for Win 10 Version 21H1/21H2	Supported Platforms article
	Minimum Supported Product Version
Endpoint Protection Products
ENS¹	10.7.0 April 2021 Update 10.6.1 April 2021 Update	KB82761
EIA	3.2.4	KB84500
Host IPS	8.0 Patch 16	KB70778
VSE	8.8 Patch 16	KB51111
Data Protection Products
DLP Endpoint²	11.10.102 Hotfix	KB68147
DE	7.2.10 Hotfix 2	KB79422
FRP	5.4.0	KB81149
Security Management Products
MA	5.7.2	KB51573
PA	6.5.0.267	KB72961
Web Protection Products
Client Proxy	4.1.2	KB74182

¹	ENS September 2023 Update and later support AMD Zen 5 Core HSP.
²	Compatible with AMD for Windows 10 only. Currently, it isn't tested with Intel CET.

Back to top

Previous Document ID ^(Secured)

KB84419

Knowledge Center

Windows 10 compatibility with our products

Environment

Summary

Previous Document ID ^(Secured)

Affected Products

Languages:

Title

Title

Knowledge Center

Windows 10 compatibility with our products

Environment

Summary

Previous Document ID (Secured)

Affected Products

Languages:

Choose your region

Title

Title

Previous Document ID ^(Secured)