EDR: Can't Load Linux Module Because of "Secure Boot"
book
Article ID: 285987
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Sensor complains "Attempting to connect to kernel module"
cbdaemon.log may show "[warning] Attempt to access driver at /dev/cbsensor: No such file or directory"
When using insmod to load the module manually, error is "could not insert module /opt/carbonblack/response/modules/cbsensor.ko.<kernel version>: Required key not available"
inserting the module manually returns the following error
insmod /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160
insmod: ERROR: could not insert module /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160: Required key not available
Environment
EDR Linux Sensor: All Versions
Cause
Secure Boot is enabled and it's not supported.
Resolution
Supporting of secure boot on Linux is on road map.