EDR: macOS Sensors Fail to Upgrade if Custom Certificates are Assigned to the Group

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Upgrading macOS sensors fails if custom certificates are applied to the sensor group.

Environment

• EDR Server:  All
• EDR macOS Sensor:  6.x - 7.2.1+

Cause

Incorrect data (FQDN rather than the vhost name) is presented to the EDR server during the upgrade request.

Resolution

• Use the custom certificates until an upgrade or downgrade is required and then temporarily switch to the legacy certificate.
• Temporarily use a MDM solution to deploy macOS sensor modifications.

Additional Information

•  CB-34420 and CB-34443  have been submitted for this bug.