Manually Import the Configlist

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to manually update/refresh the Config list locally on an App Control Agent

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows: All Supported Versions
• Apple MacOS: All Supported Versions
• Linux: All Supported Versions

Resolution

Table of Contents

• Windows
  • Download Directly From Server (Connected Agents Only)
  • Manual Transfer
  • Import on Service Start
• macOS
  • Download Directly From Server (Connected Agents Only)
  • Manual Transfer
  • Import on Service Start
• Linux:
  • Download Directly From Server (Connected Agents Only)
  • Manual Transfer
  • Import on Service Start

Windows

Download Directly From Server (Connected Agents Only)

1. Log in to the endpoint and launch a command prompt.
2. Issue the following commands:

   cd "C:\Program Files (x86)\Bit9\Parity Agent"
   dascli password GlobalPassword
   dascli configlistrefresh

3. The Agent will report CLVer is 0 while the full Configlist is downloaded and processed.

Manual Transfer

1. Acquire the latest Configlist file from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
2. Place the file somewhere on the endpoint, example: C:\Temp\
3. Issue the following commands in a command prompt:

   cd "C:\Program Files (x86)\Bit9\Parity Agent"
   dascli password GlobalPassword
   
   Import only differences between Agent's current Configlist and latest Server Configlist:
   dascli importconfiglist "C:\Temp\configlist.xml"
   
   Immediately replace Agent's entire Configlist with Server Configlist:
   dascli importconfiglist "C:\Temp\configlist.xml" full now

Import on Service Start

1. Acquire a copy the latest Configlist from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
2. Use an administrative command prompt to issue the following commands:

   cd "C:\Program Files (x86)\Bit9\Parity Agent"
   dascli password GlobalPassword
   dascli tamperprotect 0
   net stop parity
   

3. Move and rename the copy of configlist.xml to the path: C:\ProgramData\Bit9\Parity Agent\configlistfull.bt9
4. Start the Agent service in the administrative command prompt:

   net start parity

5. After the Agent ingests the file, it will be recreated as: ConfigListBackup.bt9

macOS

Download Directly From Server (Connected Agents Only)

1. Log in to the endpoint and open Terminal.
2. Issue the following commands:

   cd /Applications/Bit9/Tools
   ./b9cli --password GlobalPassword
   ./b9cli --configlistrefresh

3. The Agent will report CLVer is 0 while the full Configlist is downloaded and processed.

Manual Transfer

1. Acquire the latest Configlist file from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
2. Place the file somewhere on the endpoint, example: /Users/<USR>/Downloads/
3. Issue the following commands in Terminal:

   cd /Applications/Bit9/Tools
   ./b9cli --password GlobalPassword
   
   Import only differences between Agent's current Configlist and latest Server Configlist:
   ./b9cli --importconfiglist "/Users/<USR>/Downloads/configlist.xml"
   
   Immediately replace Agent's entire Configlist with Server Configlist:
   ./b9cli --importconfiglist "/Users/<USR>/Downloads/configlist.xml" full now

Import on Service Start

1. Open Terminal and log on as 'sudo su'
2. Turn tamper protection off and stop the Agent:

   cd /applications/bit9/tools
   ./b9cli --password GlobalPassword
   ./b9cli --tamperprotect 0
   ./b9cli --shutdown

3. Acquire the latest Configlist file from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
4. Move and rename the copy of configlist.xml to the path: /Library/Application Support/com.bit9.Agent/Data/configlistfull.bt9, example:

   mv "/Users//Downloads/configlist.xml" "/Library/Application Support/com.bit9.Agent/Data/configlistfull.bt9"

5. Start the Agent:

   ./b9cli --start

6. After the Agent ingests the file, it will be deleted.

Linux:

Download Directly From Server (Connected Agents Only)

1. Log in to the endpoint and open Terminal.
2. Issue the following commands:

   cd /opt/bit9/bin/
   ./b9cli --password GlobalPassword
   ./b9cli --configlistrefresh

3. The Agent will report CLVer is 0 while the full Configlist is downloaded and processed.

Manual Transfer

1. Acquire the latest Configlist file from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
2. Place the file somewhere on the endpoint, example: /home/<USR>/Downloads/
3. Issue the following commands in Terminal:

   cd /opt/bit9/bin/
   ./b9cli --password GlobalPassword
   
   Import only differences between Agent's current Configlist and latest Server Configlist:
   ./b9cli --importconfiglist "/home/<USR>/Downloads/configlist.xml"
   
   Immediately replace Agent's entire Configlist with Server Configlist:
   ./b9cli --importconfiglist "/home/<USR>/Downloads/configlist.xml" full now

Import on Service Start

1. Log in to the endpoint and open Terminal.
2. Turn tamper protection off and stop the Agent:

   cd /applications/bit9/tools
   ./b9cli --password GlobalPassword
   ./b9cli --tamperprotect 0
   ./b9cli --shutdown

3. Acquire the latest Configlist file from the Server's directory: \Bit9\Parity Server\configxml\configlist.xml
4. Move and rename the copy of configlist.xml to the path: /srv/bit9/data/configlistfull.bt9, example:

   sudo mv "/home/<USR>/Downloads/configlist.xml" "/srv/bit9/data/configlistfull.bt9"
   

5. Start the Agent:

   sudo ./b9cli --start

6. After the Agent ingests the file, it will be deleted.