EDR: Can't Load Linux Module Because of "Secure Boot"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Sensor complains "Attempting to connect to kernel module"
• cbdaemon.log may show "[warning] Attempt to access driver at /dev/cbsensor: No such file or directory"
• When using insmod to load the module manually, error is "could not insert module /opt/carbonblack/response/modules/cbsensor.ko.<kernel version>: Required key not available"
• inserting the module manually returns the following error

  insmod /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160
  insmod: ERROR: could not insert module /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160: Required key not available

Environment

• EDR Linux Sensor: All Versions

Cause

Secure Boot is enabled and it's not supported.

Resolution

Supporting of secure boot on Linux is on road map. 

Additional Information

Secure Boot is Supported on the Windows Sensor