# Review isolation retirement separately from whether an Azure VM size still runs

> Can a VM size remain available after its dedicated isolation property is retired?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-068-review-isolation-retirement-separately-from-whether-an-azure-vm-size-still-runs/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:30:48+00:00
- Modified: 2026-09-10T00:35:07+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

Can a VM size remain available after its dedicated isolation property is retired?

## Potentially affected

Owners of Azure workloads selected for an isolated VM size's single-server isolation property.

## DSE recommendation

Track the isolation retirement notice as a workload design change even when the VM size itself remains usable.

## Article

## Source facts

Azure isolated VM sizes are tied to specific hardware generations and have a limited hardware lifetime. Microsoft distinguishes retirement of isolation from retirement of the size: unless stated otherwise, an isolated size without an “i” in its name can lose only the isolation feature, while sizes containing “i” are retired entirely. Where only isolation ends, the source says the transition requires no action or downtime; retaining isolation requires moving to a replacement size. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/isolation).

## Applicability

Use this review when an architecture depends on a VM being the only VM on its physical server. Confirm the exact size and retirement announcement rather than interpreting its current running state as continuing evidence of the desired isolation. Keep regulatory interpretation outside this technical inventory.

## DSE recommendation

Track the isolation retirement notice as a workload design change even when the VM size itself remains usable. Ask the workload and security owners whether the original isolation requirement still applies. If it does, select a currently supported replacement and approve its migration plan before the stated retirement boundary. Keep continued operation and continued isolation as separate acceptance questions.

## Verification

Compare the deployed size with the current isolated-size listing and its specific announcement. For an approved replacement, verify the resulting size and test workload capacity and operation. Retain the reason for migration, relevant deadline, and final deployment identity. An application that continues responding after a retirement date should not by itself close the review of the physical-isolation requirement.

## Official references

[Microsoft Learn: Virtual machine sizes that provide isolation in Azure](https://learn.microsoft.com/en-us/azure/virtual-machines/isolation). Source reviewed September 9, 2026.

## Primary reference

- Name: Isolation for VMs in Azure - Azure Virtual Machines | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/virtual-machines/isolation
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Review isolation retirement separately from whether an Azure VM size still runs,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-068-review-isolation-retirement-separately-from-whether-an-azure-vm-size-still-runs/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.