EDR: How to do a silent installation of Windows sensors

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Describe how to silently install the EDR Sensor on a Windows endpoint.

Environment

• EDR Sensor: All Supported Versions
• Microsoft Windows OS
• Deployment tools such as SCCM or Group Policy

Resolution

1. Download the .MSI file from the EDR web interface: Administration > Sensors > [select relevant sensor group] > Download Sensor Installer
2. For silent installations: On the Windows endpoint, run:

msiexec.exe /qn /i <path\cbsetup.msi> /L*V msiinstall.log

3. For silent upgrades: On the Windows endpoint, run:

msiexec /fa <path\cbsetup.msi> /qn

 

Additional Information

• Important: using the /fa switch will result in a new Sensor ID being generated for the endpoint. This may cause the endpoint to appear more than once in the EDR web interface. In normal working environments the older Sensor record will be automatically removed after a certain amount of time.    
• The /qn switch will provide a silent install.
• The /fa switch is for 'repair administratively' which will overwrite an existing installation and allow you to upgrade your sensors without failing.