CB EDR: Mac Sensor Downgrade Leaves Icon in Applications directory
book
Article ID: 287922
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
After downgrading from a 6.3.x sensor version to a 6.2.x sensor version, the application icon remains in the /Application directory and is visible to the user. This only occurs on downgrades.
Environment
Carbon Black EDR Sensors: 6.3.0 and Higher
macOS: All Supported Versions
Cause
6.3.x sensor versions are delivered as an application bundle whereas 6.2.x versions aren’t. Downgrading will not remove the icon itself. We recommend server-initiated downgrades unless absolutely necessary.
Resolution
This is a known issue with the downgrade process and causes no harm. Clicking the icon produces no action. The icon can be deleted manually with no ill-effects.
Additional Information
The leftover icon is harmless and will cause no issues if left alone and can be deleted manually if desired.
If manually downgrading to a pre-6.2.7 version (6.2.6 and prior), an additional downgrade tool is required as outlined here. Server downgrades to pre-6.2.7 versions will work without the need for the additional downgrade tool.