How to Disable the Automatic Refresh of the Communication Key File (keychain.json)
book
Article ID: 288988
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
The communication key file (keychain.json) refreshes automatically once a year (31536000 sec) triggered by a scheduled task.
The automatic refresh happens without any warning in the console and this can cause issues for isolated environments where the file might need to be distributed in advance to an alternative download location.
These steps allow you to disable the scheduled task to prevent the unexpected refresh of the file.
Environment
App Control Server: 8.7+
Resolution
Open SQL Mgmt Studio with account that has write permissions (e.g. App C service account) and execute the following query:
use das; update dbo.scheduled_tasks set enabled = 0 where task like 'CommunicationKeyRotator'
To verify the change of the task go to > Support.php > Scheduled Tasks > the 'CommunicationKeyRotator' task should be disabled
Additional Information
To manually generate a new communication key file (keychain.json) whenever needed just go to > System Configuration page > Security tab > Scroll to the bottom > Click the "Regenerate" button