EDR: Is it Possible to Replace the Self-Signed Sensor Certificates?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is this possible and supported to replace the supplied self-signed certificates with their company-supplied CA signed certificates?

Environment

• EDR Server: 6.4 and Higher
• EDR Sensor: 6.4 and Higher

Resolution

Replacing the default self-signed certificates can be done in EDR 6.4 and above

Additional Information

• Review the "Managing Certificates" section of the user guide for more information replacing the certs
• Attempting to replace the self-signed certs below 6.4 is not recommended or supported