CB Protection: How to verify a GetNextCertificateBatchToValidate loop

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to verify if a server is stuck in a certificate validation loop. 

Environment

• CB Protection Server: All Supported Versions
• Microsoft SQL Server: All Supported Versions

Resolution

1. Open SQL Management Studio as the Service Account
2. Run the script:

   use das
   exec dbo.GetNextCertificateBatchToValidate;

3. Save a copy of the returned results
4. Wait 5 minutes
5. Re-run the script in step 2
6. If the list between the two results is the same, the device is likely in a certificate loop

Additional Information

If your server is stuck in a validation loop, Open a case with Carbon Black Technical Support and provide the results of the scripts used.