CB EDR: Mac Sensor Downgrade Leaves Icon in Applications directory

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

After downgrading from a 6.3.x sensor version to a 6.2.x sensor version, the application icon remains in the /Application directory and is visible to the user. This only occurs on downgrades. 

Environment

• Carbon Black EDR Sensors: 6.3.0 and Higher
• macOS: All Supported Versions

Cause

6.3.x sensor versions are delivered as an application bundle whereas 6.2.x versions aren’t. Downgrading will not remove the icon itself. We recommend server-initiated downgrades unless absolutely necessary. 

Resolution

This is a known issue with the downgrade process and causes no harm. Clicking the icon produces no action. The icon can be deleted manually with no ill-effects. 

Additional Information

• The leftover icon is harmless and will cause no issues if left alone and can be deleted manually if desired. 
• If manually downgrading to a pre-6.2.7 version (6.2.6 and prior), an additional downgrade tool is required as outlined here. Server downgrades to pre-6.2.7 versions will work without the need for the additional downgrade tool.