Endpoint Standard: How to Force 3.3.x.x and Higher Sensors With RepCLI Authentication Enabled to Update
search cancel

Endpoint Standard: How to Force 3.3.x.x and Higher Sensors With RepCLI Authentication Enabled to Update

book

Article ID: 288877

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

After implementing the Signature Pack fix for the August 1, 2019 issue https://community.carbonblack.com/t5/Knowledge-Base/CB-Defense-Signature-Pack-Version-Has-Not-Updated-Since-August-1/ta-p/77662, force Sensors to update immediately rather than allowing the update window to elapse

Environment

  • Endpoint Standard Sensor: 3.3.x.x and higher
  • Endpoint Standard Console: All versions
  • RepCLI Authentication Enabled
  • Microsoft Windows: All supported versions

Resolution

If Sensor was rebooted to resolve the issue, two forced updates are required:
  1. To force the first update that will resolve the current Sensor state
    1. Open Administrator command prompt and change directory to Confer
      cd C:\Program Files\Confer
    2. Run the following command (this requires RepCLI authentication)
      repcli cloud metadata
    3. Confirm that  C:\Program Files\Confer\datafile2 is updated
    4. Run the update command
      repcli updateavsignature
  2. To then force the incremental Signature pack update
    1. Run the following command from the C:\Program Files\Confer directory
      repcli cloud metadata
    2. Confirm that C:\Program Files\Confer\datafile2 is updated
    3. Run the update command
      repcli updateavsignature
If the Sensor was upgraded to 3.4.0.1052, one forced update is required
  1. Open Administrator command prompt and change directory to Confer
    cd C:\Program Files\Confer
  2. Run the following command (this requires RepCLI authentication)
    repcli cloud metadata
  3. Ensure that C:\Program Files\Confer\datafile2 is updated
  4. Run the update command
    repcli updateavsignature
If the Sensor is 3.7.0.1253 or higher, one forced update is required
  1. Open Administrator command prompt and change directory to Confer
    cd C:\Program Files\Confer
  2. Run the following command (this requires RepCLI authentication)
    repcli cloud metadata
  3. Ensure that C:\Program Files\Confer\datafile2 is updated
  4. Run the update command
    repcli localscanner updatesignature

Additional Information

  • The Signature pack version will be updated to the following or later once issue is resolved 
8.16.20.120
  • Additional reboots can also be used to force Sensor updates after the initial reboot or Sensor upgrade