EDR: Cbcluster Commands Request Password

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Password prompt when running /usr/share/cb/cbcluster command

Environment

• EDR Server: All Versions
• Clustered

Cause

Public key is missing from minion authorization_keys folder

Resolution

1. Log into the Master server
2. Copy the cb_ssh public key

   cp /etc/cb/ssh/cb_ssh.pub /<path to drop>/

3. Log into the impacted minion(s)
4. Copy the cb_ssh.pub file to the /tmp directory (this will depend on how you are transferring the file)

   cp cb_ssh.pub /tmp/

5. Run the following command

   cat /tmp/cb_ssh.pub >> ~/.ssh/authorized_keys

6.  Confirm cbcluster command now run from Master server
7.  Remove copied public key from step 2

   rm -f /<step2path>/cb_ssh.pub