App Control: How To Rebuild Agent Cache Files On Linux Machines
search cancel

App Control: How To Rebuild Agent Cache Files On Linux Machines

book

Article ID: 286745

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Rebuild agent cache files on Linux machines

Environment

  • App Control Agent: All Supported Versions
  • Linux: All Supported Versions

Resolution

  1. cd to following directory: 
    /opt/bit9/bin
  2. Run following commands to turn off tamper protection and stop agent:
    ./b9cli --password <cli_password_here>
    ./b9cli --tamperprotect 0
    ./b9cli --shutdown
  3. Run following command to confirm b9daemon process has stopped: 
    ps -ef
  4. Remove App Control agent cache files with following command:
    rm –f /srv/bit9/data/cache.*
  5. Restart App Control agent:
    ./b9cli --startup

Additional Information

  • Deleting the Agent cache files as shown, will cause the device to re-initialize which could cause degraded performance or possible temporary blocks.
  • Deleting the Linux Agent cache results in new Host ID unless on Linux Agent 8.7.17+ (EP-16690)