EDR: macOS Sensors Fail to Upgrade if Custom Certificates are Assigned to the Group
book
Article ID: 287647
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Upgrading macOS sensors fails if custom certificates are applied to the sensor group.
Environment
- EDR Server: All
- EDR macOS Sensor: 6.x - 7.2.1+
Cause
Incorrect data (FQDN rather than the vhost name) is presented to the EDR server during the upgrade request.
Resolution
- Use the custom certificates until an upgrade or downgrade is required and then temporarily switch to the legacy certificate.
- Temporarily use a MDM solution to deploy macOS sensor modifications.
Feedback
thumb_up
Yes
thumb_down
No