EDR: How to Upgrade RHEL/CentOS 6 to 7 with the Product Installed

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to upgrade RHEL/CentOS 6 to 7 when the product is installed with version 6.4.1 or higher

Environment

• EDR (Formerly CB Response) Server: 6.4.1 or Higher
• RHEL/CentOS 6
• RHEL/CentOS 7

Resolution

1. Please read the documentation from RHEL Support on upgrading the OS before continuing. https://access.redhat.com/solutions/637583
2. It's always a good idea to take a backup of your data prior to a major change, please follow the Server Cluster Management Guide for backup and restore instructions
3. Stop the cb-enterprise services

   Standalone:
   sudo service cb-enterprise stop
   
   Cluster:
   sudo /usr/share/cb/cbcluster stop

4. Remove cb-enterprise via yum. This will only remove packages and libraries, but data and configs will remain

   yum remove cb-enterprise

5. Perform the OS upgrade per RHEL documentation
6. Set the baseurl in /etc/yum.repos.d/CarbonBlack.repo. Using the latest will upgrade the server, or the current installed url can be used. https://community.carbonblack.com/t5/Knowledge-Base/EDR-What-Repo-Contains-a-Specific-Server-Version/ta-p/77198
7. Reinstall cb-enterprise with the RHEL/CentOS 7 packages

   yum clean all
   yum install cb-enterprise

8. After re-installing EDR 7.6+ onto the upgraded OS EL7, modify the /etc/cb/cb.conf variable on each EDR server:

   CbJavaHome=/usr/lib/jvm/jre-1.8.0/
   to
   CbJavaHome=/usr/lib/jvm/jre-11/

9. Start the cb-enterprise services

   Standalone:
   sudo service cb-enterprise start
   
   Cluster:
   sudo /usr/share/cb/cbcluster start

Additional Information

• If assistance is needed in performing the upgrade or steps, please reach out to your account manager to schedule Professional Services time
• EDR Server 6.4.1 or Higher is required for these steps. This version was the start of RHEL/CentOS 7.6 support