EDR: NGINX Fails to Start After Upgrading the Server

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• The NGINX service fails to start after upgrading the EDR Server
• /var/log/cb/nginx/startup.log contains: "nginx: [emerg] duplicate location "/" in /etc/cb/nginx/conf.d/includes/location.root.deny:1"

Environment

• EDR Server: 6.1 and Higher

Cause

• This can occur when an instance has a different API port but is not using a multihome (signed cert) configuration
• When the server is multihome but not using the correct version of the /etc/cb/nginx/conf.d/cb.conf file

Resolution

• In the /etc/cb/cb.conf on the master or standalone server change the NginxWebApiHttpPort= value to 443
• If cluster change the MinionApiPort to 443
• If the server is using an alternate webui port then confirm that the /etc/cb/nginx/conf.d/cb.conf file being used is the multihome version