Error[Hash mismatch] on TrustedCertList.pem and/or KeyChain.json file

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Trace.bt9 log (created during High Debugging) shows:

Failed to obtain file from 'https://ServerAddress/hostpkg/pkg.php?pkg=TrustedCertList.pem': Hash mismatch Target[C:\ProgramData\Bit9\Parity Agent\TrustedCertList.pem.tmp]
Failed to obtain file from 'hhttps://ServerAddress/hostpkg/pkg.php?pkg=keychain.json': Hash mismatch Target[C:\ProgramData\Bit9\Parity Agent\keychain.json.tmp]

Environment

• App Control Server: 8.7.0 and Higher
• App Control Agent: 8.7.0 and Higher

Cause

There is an issue with the file itself, the hash that is being downloaded is not what the App Control Agent expected thus it keeps retrying

Resolution

1. Verify the Resource Download Location in System Configuration > Advanced is still accurate, and contains the necessary files.
2. Log in to the application server as the Carbon Black Service Account.
   • If an Agent is installed, temporarily disable Tamper Protection.
3. Temporarily stop the App Control Server service.
4. Delete the files:

   C:\Program Files (x86)\Bit9\Parity Server\hostpkg\TrustedCertList.pem
   C:\Program Files (x86)\Bit9\Parity Server\hostpkg\keychain.json

5. Start the App Control Server service, and verify the files are rebuilt.
6. If an alternate Resource Download Location is being used, verify the new files are synced to the alternate RDL correctly.