EDR: How to Check Server Certificate Thumbprints

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to check the thumbprints for the server certificates

Environment

• EDR Server: 6.4.0 and Higher

Resolution

Run the following command

openssl x509 -noout -fingerprint -sha1 -inform pem -in <path to cert>

For example:

openssl x509 -noout -fingerprint -sha1 -inform pem -in /etc/cb/certs/cb-server.crt

Additional Information

• This thumbprint should match what is in the EDR console under Settings > Certificate Management