﻿---
title: Elastic Defend requirements
description: To properly deploy Elastic Defend without a Mobile Device Management (MDM) profile, you must manually enable additional permissions on the host before...
url: https://www.elastic.co/elastic/docs-builder/docs/2996/solutions/security/configure-elastic-defend/elastic-defend-requirements
products:
  - Elastic Cloud Serverless
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Elastic Defend requirements
To properly deploy Elastic Defend without a Mobile Device Management (MDM) profile, you must manually enable additional permissions on the host before Elastic Endpoint—the installed component that performs Elastic Defend's threat monitoring and prevention—is fully functional. For more information, refer to [Enable Elastic Defend access on macOS](https://www.elastic.co/elastic/docs-builder/docs/2996/solutions/security/configure-elastic-defend/enable-access-for-macos).
For information about supported operating systems, refer to the [Elastic Support Matrix](https://www.elastic.co/support/matrix#elastic-defend).

## Minimum system requirements


| Requirement                        | Value    |
|------------------------------------|----------|
| **CPU**                            | Under 2% |
| **Disk space**                     | 1 GB     |
| **Resident set size (RSS) memory** | 500 MB   |


## SSL/TLS certificate requirements

<applies-switch>
  <applies-item title="{ stack: ga 9.1+, serverless: ga }" applies-to="Elastic Cloud Serverless: Generally available, Elastic Stack: Generally available since 9.1">
    Elastic Endpoint supports Elliptic Curve (EC) keys and all standard TLS [common configuration options](/elastic/docs-builder/docs/2996/solutions/observability/apm/apm-server/ssl-tls-output-settings#apm-ssl-common-config).
  </applies-item>

  <applies-item title="{ stack: ga =9.0 }" applies-to="Elastic Stack: Generally available in 9.0">
    Elastic Endpoint does not support Elliptic Curve (EC) keys for SSL certificates. If an EC key is configured, the policy response displays the error: `Unsupported or invalid PEM format`.
  </applies-item>
</applies-switch>