CB Protection: Duplicate Host Registration Events When Installing Connecting New Agents

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Several machines are not showing in the CB Protection Console. 
• Dascli status shows Disconnected (Server Error). 
• Multiple events for Duplicate Host Registrations. 

Environment

• CB Protection Console: All Versions

Cause

The computers have identical host IDs usually caused by using an image with the CB Protection Agent installed, but no template created. 

Resolution

1. In the CB Protection Console, navigate to the events page. 
2. Change the view drop down menu to "Duplicate Computer Registrations".
3. Click the computer name listed under the Source column. 
   • You only need to click into each computer name displaying these events once. 
4. On the right hand panel, click " Re-Register Computer". 
5. This will cause each one to re-register at next check in. Please wait at least 24 hours for each one to populate in case any are offline. 

Additional Information

These errors can be avoided by creating a master image, and template. Full instructions can be found at the following link: https://knowledge.broadcom.com/external/article/286775/app-control-how-to-create-a-template-com.html