CB Protection: Mac OS agent install .pkg certificate expired

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• The Mac agent installer .pkg certificate is expired
• Attempts to install the package may fail due to the expired certificate

Environment

• CB Protection Agent: 7.2.3 patch 11 and lower

Cause

The Developer ID certificate has been updated and invalidated the previous package certificate

Resolution

• 7.2.3 Patch 12 contains the latest certificate and can be installed without issue.
• Older agent versions can still be installed, but will appear as an untrusted application on the endpoint.

Additional Information

The official announcement for the 7.2.3 patch 12 agent can be found here:
https://community.carbonblack.com/t5/CB-Protection-Discussion/7-2-3-Patch-12-Mac-Agent-Release/m-p/65626

An official announcement regarding the certificate expiration was also released and can be viewed here:
https://community.carbonblack.com/t5/CB-Protection-Knowledge/Mac-Protection-Developer-ID-Certificate-Expirations/ta-p/66036