Manage Client Registration Codes

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To configure & manage Client Registration Codes for use during Agent installation.

Environment

• App Control Server: Version 8.10.0+
• App Control Windows Agent: Version 8.9.2+
• App Control macOS Agent: Version 8.9.2+

Resolution

Enabling Client Registration Codes:

1. Log in to the Console and navigate to System Configuration > Security > Client Registration Code.
2. Click Edit > Require Clients to Provide Registration Code During Install: Enabled
3. Click Update.
4. Once prompted, click Generate New Code to generate the first code.

Enabling or Disabling Registration Codes:

1. Log in to the Console and navigate to System Configuration > Security > Registration Code Archive.
2. Toggle the Enabled setting for the relevant Registration Code.

 

Using a Registration Code:

NOTE: Installing the Agent with a missing or invalid Registration Code will require manually applying the Registration Code before the Agent is allowed to connect.

Windows

• Include the Registration Code during install:

  msiexec.exe /i "PolicyInstaller.msi" B9_REGISTRATION_CODE=RegistrationCodeHere /qn /norestart /L*v "C:\Temp\AgentInstall.log"
  

• Manually entering a Registration Code after installation:

  cd "C:\Program Files (x86)\Bit9\Parity Agent"
  dascli password GlobalPassword
  dascli register code RegistrationCodeHere

macOS

• It is not currently possible to include the Registration Code during install of the Agent.
• Manually entering the Registration Code after installation is required:

  cd /Applications/Bit9/Tools/
  ./b9cli --password GlobalPassword
  ./b9cli --registercode "RegistrationCodeHere"

Additional Information

• By default, Registration Codes are turned off.
• Generating a new Client Registration Code does not automatically disable the previous code.
• Agents installed before this feature was enabled will remain connected after it is enabled.
• Agents installed after this feature is enabled will require a valid Registration Code before the Agent is allowed to connect.
• Changing the Client Registration Code will not disconnect Agents associated with that Registration Code.
• Disabling the Client Registration Code feature will not purge the Registration Code Archive.
• The Registration Code cannot be used in place of the Global Password.