Airgap SSL Certificate is MISSING

Products

• Carbon Black EDR

Issue/Introduction

EDR install fails with "Aborting execution: Carbon Black EDR Alliance SSL certificate is MISSING."
 

Environment

• Carbon Black EDR Server:  All versions

Cause

• The carbon-black-release-...rpm was not installed first.  
• The /etc/cb/certs/ contents was moved to another directory (perhaps /etc/pki).

Resolution

1. The RPM provided by Broadcom Carbon Black needs to be run prior to 'yum install cb-enterprise' and is documented here.
2. If the certificates are not in the default location, move the certificates back to /etc/cb/certs or provide a symlink to the certificates.

Additional Information

• The rpm sets up the certificates needed in /etc/cb/certs directory which are required to install cb-enterprise. 
• The rpm also installs and validates the license. 
• The rpm creates the CarbonBlack.repo that is needed to point to Alliance or the air-gapped Satellite server.