Keeping the Azure Connected Machine agent up to date across a large server estate requires persistent coordination and manual work. When enabled, Automatic Agent Upgrade simplifies this process by allowing Microsoft to manage agent upgrades for you.
What is Automatic Agent Upgrade?
Automatic Agent Upgrade helps keep the Azure Connected Machine agent up to date.
When enabled, machines are scheduled to upgrade to the latest agent version without requiring you to manually deploy each new agent version. Upgrades are rolled out in batches across regions and initiated during off-peak hours to help maintain stability and minimize disruption.
This helps:
- Reduce operational overhead associated with manually managing agent upgrades.
- Stay current with the latest available security, reliability, quality, and platform improvements.
- Manage upgrades at scale across Azure Arc-enabled server environments.
Enable Automatic Agent Upgrade at scale
Since the initial public preview, we’ve added additional ways to make Automatic Agent Upgrade easier to adopt and manage across your environment.
Azure Policy
Use the built-in Configure Azure Arc-enabled Servers to enable automatic upgrades policy to turn on Automatic Agent Upgrade across an assigned scope and remediate machines that are not yet configured.
For setup guidance, see the Azure Policy walkthrough.
Enable during onboarding
Automatic Agent Upgrade can also be used when connecting a new server to Azure Arc by adding –enable-automatic-upgrade to the azcmagent connect command. This makes it easier to include Automatic Agent Upgrade as part of existing at-scale onboarding processes.
For setup guidance, see the onboarding walkthrough.
Azure portal onboarding
When generating an onboarding script through the Azure portal, you can select Automatic Agent Upgrade so that the generated script includes the required configuration.
For setup guidance, see the Portal onboarding walkthrough.
Frequently asked questions
What is Automatic Agent Upgrade for Azure Arc-enabled servers?
Automatic Agent Upgrade is a feature that helps keep the Azure Connected Machine agent up to date. After you turn it on, Microsoft manages agent upgrades for your Azure Arc-enabled servers.
How does Automatic Agent Upgrade work?
Machines are scheduled to receive the latest agent version. Upgrades roll out in batches across regions and occur during off-peak hours to help maintain stability and minimize disruption.
What are the benefits of Automatic Agent Upgrade?
Automatic Agent Upgrade reduces the operational work of managing upgrades manually, helps servers stay current with security, reliability, quality, and platform improvements, and supports upgrade management at scale.
How can I turn on Automatic Agent Upgrade at scale?
You can use the built-in Configure Azure Arc-enabled Servers to enable automatic upgrades policy across an assigned scope. The policy can also remediate machines that are not yet configured.
Can I configure Automatic Agent Upgrade while onboarding a server?
Yes. Add —enable-automatic-upgrade to the azcmagent connect command, or select Automatic Agent Upgrade when generating an onboarding script in the Azure portal.
Get started
Automatic Agent Upgrade is now generally available for Azure Arc-enabled servers.
To get started, review the Automatic Agent Upgrade documentation for prerequisites and the available options for enabling and managing automatic upgrades across your environment.


