Carbon Black Cloud: How To Reregister Sensors That Have Been Deregistered
search cancel

Carbon Black Cloud: How To Reregister Sensors That Have Been Deregistered

book

Article ID: 286960

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to re-register sensors that may have become unintentionally de-registered.

Environment

  • Carbon Black Cloud Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Resolution

  1. Identify which sensors were deregistered
  2. Reinstall sensors using a preferred installation method
  3. If reinstall is unsuccessful, please open a Support case and provide MSI installer log from a failed installation

Additional Information

  • Reinstall may fail if SCCM or GPO was used to deploy the sensor and not configured to allow upgrade
  • If SCCM or GPO was not configured to allow sensor upgrades and an attempt was made to reinstall sensor, Sensor Removal Tool will need to be used to remediate the failing installation. See the following KBs
https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-How-To-Access-Sensor-Removal-Tool/ta-p/102826
https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-How-to-Configure-SCCM-to-Allow-Sensor-Upgrades/ta-p/34837
https://community.carbonblack.com/t5/Knowledge-Base/PSC-How-to-Configure-GPO-to-Allow-Sensor-Upgrades/ta-p/40766
  • If "Delete sensors that have been deregistered for..." setting is used and enough time had passed, some of the deregistered sensors may have been deleted from the Endpoints page
  • If help is needed to determine which devices have deregistered, please open a Support case for assistance