InsightVM Security Console Supported Operating Systems End-Of-Life Announcement
As part of our continued commitment to security, stability, and alignment with vendor support lifecycles, we are updating our list of officially supported operating systems. Note that this change only applies specifically to the underlying host systems running your InsightVM Console and Scan Engine deployments.
Effective August 29, 2025, the following operating systems will no longer be supported, as they have reached or exceeded their End-of-Life (EOL) status for standard support with their respective vendors: Ubuntu Linux 16.04 LTS
- Ubuntu Linux 18.04 LTS
- Ubuntu Linux 20.04 LTS
- Oracle Linux 7
- Microsoft Windows Server 2016
- Microsoft Windows Server 2019
- Red Hat Enterprise Linux Server 6
- Red Hat Enterprise Linux Server 7
Frequently Asked Questions
What is meant by “support for operating systems”?
When we say an operating system is supported, it means our products are fully tested and verified to run on that OS version. Customers using supported systems receive full access to product updates, technical assistance, compatibility with new features, and troubleshooting support.
Running the product in an unsupported environment may result in unexpected behavior or degraded performance. In such cases, our recommended course of action will typically be to upgrade to a supported operating system or configuration, particularly if the issue is found to be related to the underlying unsupported platform.
Can I still use InsightVM to scan and assess these listed OS versions?
Rapid7 will continue to scan and assess these OS versions and release vulnerability coverage from the vendors. This announcement is solely regarding the hosting of InsightVM Security Console and Scan Engine.
When will Ubuntu 24.04 be officially supported?
Current ETA for Ubuntu 24.04 support is by July 2025.
Will future InsightVM console or engine updates fail to install or run?
While product and content updates may still apply to Consoles running on unsupported operating systems, we do not recommend continuing in this configuration. These environments are no longer tested and carry a higher risk of failure or degraded performance.
If issues arise after the end-of-life date and are linked to the underlying OS, our support team will likely recommend upgrading to a supported, validated version before further assistance can be provided. We strongly encourage customers to proactively upgrade to a supported OS to ensure stability and continued support.
The vendor for my underlying host offers Extended Support, will Rapid7 continue to support this?
To ensure we continue delivering the most secure, reliable, and future-ready experience, Rapid7 will no longer support Microsoft Windows Server 2016 and 2019, or Ubuntu 20, for InsightVM.
While these vendors have extended support for these versions, our decision is based on the end of mainstream support, allowing us to align with the OS’s lifecycle and focus on platforms that offer modern security features and long-term stability.
By supporting newer versions such as Windows Server 2022 or Ubuntu 22 - and aligning with future OS releases - we can better enable innovation, improve compatibility, and deliver continued value as the OS’ advances its server platforms.
We appreciate your understanding and are happy to support you with any transition planning.
What method should I use to upgrade the underlying OS?
Customers may choose two methods for upgrading the underlying OS: an In-place upgrade or Host migration.
In-place upgrade:
- Refer to any vendor guidance.
- Ensure you have a Platform Independent backup for InsightVM that is moved off server.
- Alternatively, if possible, take a snapshot of the Virtual Machine that can be rolled back to if necessary.
Host migration:
- A host migration can be used, if you wish to move to a different operating system or want to have a Security Console available to roll back too quickly during the upgrade process.
- If you plan to migrate to a new Security Console host on a Supported OS, read Migrate a backup to a new Security Console host.
- Ensure your console is on the latest PostgreSQL Database Version (15.12) and Product Version to ensure a smooth transition.
- If this has not been done and you are already in the migration process, read Do I still need to migrate to the latest version if I’m just going to move my Security Console deployment to another host?
Are other Rapid7 products impacted by this announcement?
This announcement only impacts the underlying host machine for InsightVM Security Console and Scan Engine.
I’m a Hosted or Managed InsightVM customer. Do I need to worry about this?
Our Hosted and Managed InsightVM environments are maintained by Rapid7 and all run on fully supported operating systems. You do not need to worry about any maintenance on the host machine of your instance. This is handled by our own internal team.
I noticed some operating systems that have passed their vendor’s standard support (EOL) were not included in the customer notification. Are these still supported?
The operating systems listed in our end-of-support notice are those for which a supported upgrade path is currently available, that is, newer versions with active vendor support. While some operating systems, such as SUSE Linux Enterprise Server 12, have passed their vendor's standard support period, they were not included because we are still in the process of adding support for their respective successor versions (for example, SUSE Linux Enterprise Server 15). We will continue to support operating system versions not listed in our recent communication at this time, and any future changes to their support status will be clearly communicated in advance.