Update Resource Download Location or Certificate Download Location

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To change the Resource Download Location or Certificate Download Location that is used for hosting Agent files

Environment

• App Control Console: All Supported Versions

Resolution

Reminders: Only HTTP or HTTPS is supported with alternate Download Locations. The App Control Server does not automatically sync these files to the alternate Download Locations. A separate sync task will need to be created to automatically copy files to the alternate Download Locations.

1. Log in to the Console.
2. Import the Public Certificate from the new Download Location: Import a Trusted Communication Certificate.
3. Navigate to the gear icon > System Configuration > Advanced Options > Edit.
   • Note: If using an alternate Download Location it is recommended to use the same settings for both the Resource and Certificate Download Locations.
4. In the section Carbon Black App Control Agent specify the relevant Resource Download Location or Certificate Download Location for Agents to use, example:

   Example: https://acmeinc.internal/appcontrol/

5. Copy the required files from "C:\Program Files (x86)\Bit9\Parity Server\hostpkg\" to the new alternate Download Location:
   • Resource Download Location Files:
     

     All .bsx files
     All .msi files
     All .rpm files
     configlist.xml
     configlist.xml.egk
     configlist.xml.enc
     configlistwithdeleteditems.xml
     configlistwithdeleteditems.xml.egk
     configlistwithdeleteditems.xml.enc
     Yara.bt9

   • Certificate Download Location Files:

     keychain.json 
     TrustedCertList.pem

6. Log in to the application server hosting the Console and restart the services:
   • Carbon Black App Control Reporter
   • Carbon Black App Control Server

Additional Information

• By default the Resource Download Location is:

  https://**ServerIP**/hostpkg/pkg.php?pkg=

• By default the Certificate Download Location is:

  https://**ServerIP**/packages/

• **ServerIP** is a wildcard for the Server Address as specified in Settings > System Configuration > General.
• Alternatively, it is possible to change the port used to download files from the Server.