# Prepare scale-set workloads for automatic OS disk replacement

> What must be reproducible before an Azure scale set receives automatic OS image upgrades?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-022-prepare-scale-set-workloads-for-automatic-os-disk-replacement/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:31:34+00:00
- Modified: 2026-09-10T00:32:00+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 2 minutes

## What you need to know

What must be reproducible before an Azure scale set receives automatic OS image upgrades?

## Potentially affected

Operators considering automatic OS image upgrades for Azure Virtual Machine Scale Sets.

## DSE recommendation

Prove that the application can be reconstructed from the scale-set model before enabling automatic image replacement.

## Article

## Source facts

An automatic OS image upgrade replaces each instance’s operating-system disk, reruns configured extensions and custom-data scripts, and preserves attached data disks. Microsoft requires the image version to be latest. Non-Service Fabric scale sets need application-health monitoring, using either the health extension or a load-balancer probe, not both. For multiple placement groups, the documented probe requirement specifies a Standard Load Balancer. Automatic image upgrades must not be combined with AutomaticByPlatform guest-patch orchestration. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade).

## Applicability

Scope this readiness check to Uniform orchestration outside Service Fabric. The documentation identifies automatic OS upgrades for Flexible orchestration as preview and gives that mode additional restrictions. Check the supported image list before choosing the mechanism. [Mode and image requirements](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade).

## DSE recommendation

Prove that the application can be reconstructed from the scale-set model before enabling automatic image replacement. Ask its owner to identify every change made manually inside an instance, then decide where each required setting or artifact will be maintained. Include bootstrap credentials and the intended data-disk attachment behavior in that review. Choose an application-health response that represents readiness to serve the actual workload.

## Verification

Use an approved test scale set to observe an image transition. Compare the resulting application configuration with the declared model, exercise the service transaction, and record the health signal that allowed progression. Resolve missing customizations before expanding the rollout. Preserve upgrade-history evidence alongside the tested image reference; do not treat a deployment flag alone as acceptance.

## Official references

[Microsoft Learn: Automatic OS image upgrades with Azure Virtual Machine Scale Sets](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade). Source reviewed September 9, 2026.

## Primary reference

- Name: Automatic OS image upgrades with Azure Virtual Machine Scale Sets - Azure Virtual Machine Scale Sets | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Prepare scale-set workloads for automatic OS disk replacement,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-022-prepare-scale-set-workloads-for-automatic-os-disk-replacement/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.