Important
This page applies to existing customers who enabled the plan on a subscription before April 21, 2025.
Defender for SQL Servers on Machines plan's includes an updated agent architecture that simplifies onboarding and improves SQL protection. To gain visibility and provide protection, the plan requires each SQL server instance to be registered within Azure.
Registration occurs automatically with the SQL Server IaaS Agent extension which automates registration for Azure VMs. Arc-enabled SQL Server instances are automatically connected by the Azure extension for SQL Servers.
If automatic registration is disabled, you must manually register each SQL server instance to protect it with Defender for SQL Server on Machines plan.
Existing customers must follow the instructions on this page to update the configuration to enable Auto registration through the SQL extension.
Important
The Defender for SQL servers on Machines plan is undergoing a transition to the new agent architecture. For more information, see Defender for SQL servers on Machines plan transition.
Update the plan on multiple subscriptions
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud.
On the Overview page, select Update the configuration in Defender for SQL Servers on Machines plan for multiple subscriptions.
Select all the relevant subscriptions.
Select Update.
Update the plan on a single subscription
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud > Environment settings.
Select the relevant subscription.
Locate the Defender for Databases plan and select Settings.
Select Update in the pop-up window.
