CB PSC: Sensor Version Differs From What Is Reported In The Console

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• On the local system, the sensor reports a different version than what is found in the console.
• Example: Add / Remove Programs reports CB Defense Sensor 3.2.0.213 yet the console and confer.log files report the sensor as 3.2.0.10101.

Environment

• CB PSC Sensor: All Versions
• Microsoft Windows: All Supported Versions

Cause

Critical registry locations were overwritten through; failed installation, improper registry changes, or failed GPO / SCCM pushes.

The package GUID under [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\[GUID] does not match the package installed.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\98113471A04147740B565CE52B278F1E] [GUID]

Resolution

1. Place the sensor into a policy that has "Require code to uninstall sensor" disabled
2. Place the sensor into bypass
3. Uninstall sensors that are in the group / are in bypass from the console
4. If uninstall fails please see this article for further instructions: 
   • https://community.carbonblack.com/t5/Knowledge-Base/CB-Defense-How-to-Uninstall-Windows-Sensor/ta-p/65560

Additional Information

Here are the GUIDs for each version (64-bit) under this key: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\98113471A04147740B565CE52B278F1E]

• 3.1.0.100: "26EDBD16E6BC91843BF15D70BE13B6E3"=""
• 3.2.0.10101: "B845020DC775C014B8072FF1F5A3FE3A"=""
• 3.2.0.213: "6F546EE3326720F418F9782BE062D042"=""
• 3.2.0.216: "52C8CC10BC38F2A448D6B841D43270DA"=""
• 3.2.1.51: "077B0BFA804941D4B86DDDC31668BA3C"=""
• 3.3.0.982: "66978F27746B0CE47BC8ABEAB1FDF0E3"=""