Manage Client Registration Codes

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To configure & manage Client Registration Codes for use during Agent installation.

Environment

• App Control Server: Version 8.10.0+
• App Control Agent: Version 8.9.2+

Resolution

Enabling Client Registration Codes:

1. Log in to the Console and navigate to System Configuration > Security > Client Registration Code.
2. Click Edit > Require Clients to Provide Registration Code During Install: Enabled
3. Click Update.
4. Once prompted, click Generate New Code to generate the first code.

Enabling or Disabling Registration Codes:

1. Log in to the Console and navigate to System Configuration > Security > Registration Code Archive.
2. Toggle the Enabled setting for the relevant Registration Code.

Using a Registration Code:

• NOTE: Installing the Agent with a missing or invalid Registration Code will require manually applying the Registration Code before the Agent is allowed to connect.
• Installing an Agent with the registration code:

  msiexec.exe /i "PolicyInstaller.msi" B9_REGISTRATION_CODE=RegistrationCodeHere /qn /norestart /L*v "C:\Temp\AgentInstall.log"
  

• Manually entering a Registration Code after installation:

  cd c:\program files(x86)bit9\parity agent
  dascli password GlobalPassword
  dascli register code RegistrationCodeHere

Additional Information

• By default this feature is off.
• Generating a new Client Registration Code does not automatically disable the previous code.
• Agents installed before this feature was enabled will remain connected after it is enabled for the first time.
• Changing the Client Registration Code will not disconnect Agents associated with that Registration Code.
• Disabling the Client Registration Code feature will not purge the Registration Code Archive.
• The Registration Code cannot be used in place of the Global Password.