Macrophages infected with attenuated Mycobacterium tuberculosis strain H37Ra become apoptotic, limiting bacterial replication and facilitating antigen presentation. Here, we demonstrate that cells infected with H37Ra became apoptotic after formation of an apoptotic envelope on their surface was complete. This process required exposure of phosphatidylserine on the cell surface followed by deposition of the phospholipid-binding protein annexin-1 and then transglutaminase-mediated crosslinking of annexin-1 via its N-terminal domain. In macrophages infected with virulent strain H37Rv, in contrast, the N-terminal domain of annexin-1 was removed by proteolysis thus preventing completion of the apoptotic envelope, which results in macrophage death by necrosis. Host defense of virulent Mycobacterium tuberculosis thus occurs by failure to form the apoptotic envelope, which leads to macrophage necrosis and dissemination of infection in the lung