EDR: Can't Load Linux Module Because of "Secure Boot"
search cancel

EDR: Can't Load Linux Module Because of "Secure Boot"

book

Article ID: 285987

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Sensor complains "Attempting to connect to kernel module"
  • cbdaemon.log may show "[warning] Attempt to access driver at /dev/cbsensor: No such file or directory"
  • When using insmod to load the module manually, error is "could not insert module /opt/carbonblack/response/modules/cbsensor.ko.<kernel version>: Required key not available"
  • inserting the module manually returns the following error
    insmod /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160
    insmod: ERROR: could not insert module /opt/carbonblack/response/modules/cbsensor_3_1_1777950.ko.3.10.0-1160: Required key not available

Environment

  • EDR Linux Sensor: All Versions

Cause

Secure Boot is enabled and it's not supported.

Resolution

Supporting of secure boot on Linux is on road map. 

Additional Information

Secure Boot is Supported on the Windows Sensor