EDR: Windows Sensor Upgrade Fails with Unable to process command line arguments HrError[0x80070005]

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Windows EDR sensor fails to manual upgrade
• Errors similar to this are seen in the upgrade.log

Tid[26D8] 2020-07-08 13:24:40 (e): Cannot open root key! 5
Tid[26D8] 2020-07-08 13:24:40 (e): Unable to pre-initialize config HrError[0x80070005]
Tid[26D8] 2020-07-08 13:24:40 (i): Unable to initialize configstore HrError[0x80070005]
Tid[26D8] 2020-07-08 13:24:40 (i): Unable to do inline upgrade HrError[0x80070005]
Tid[26D8] 2020-07-08 13:24:40 (e): *** FATAL CB ASSERT FAILED:((_hKey != nullptr)) @ (CbConfig::DoesValueExist:606) ***
Tid[26D8] 2020-07-08 13:24:40 (e): Could not extract certificates back out of Cert Store - 80004005
Tid[26D8] 2020-07-08 13:24:40 (i): Inline upgrade failed HrError[0x80070005]
Tid[26D8] 2020-07-08 13:24:40 (i): Unable to process command line arguments HrError[0x80070005]

 

Environment

• EDR Sensor: All Versions
• Microsoft Windows: All Supported Versions

Cause

Upgrader is not being run as administrator

Resolution

Run the upgrade command as an administrator