Carbon Black Cloud: Unable to Install with error 'Failed to move Cfg.ini from InstallDir'

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

msi.log file contain the following error messages.

ERROR     MoveCfgIni: Moving Cfg.ini from C:\Program Files\Confer\cfg.ini to D:\ProgramData\CarbonBlack\DataFiles\cfg.ini failed with error 17
ERROR     Custom Action CAMoveDataFiles failed. Failed to move Cfg.ini from InstallDir to <ProgramData> DataFiles directory Return code : 1603

 

Environment

• Carbon Black Cloud Sensor: 3.9.1
• Windows: All Supported Versions

Cause

• CBC Windows sensor only supports C:\ drive install. 
• Default value of the %ALLUSERSPROFILE% should be %SystemDrive%\ProgramData
• Either the %SystemDrive% is not configured as "C:" or the default value of %ALLUSERSPROFILE% has been changed.

Resolution

 

• Ensure the sensor is installed to the C:\ drive.
• Change %ALLUSERSPROFILE% back to default %SystemDrive%\ProgramData

Additional Information

Windows Sensor use  SHGetKnownFolderPath with FOLDERID_ProgramData to obtain the ProgramData directory path. If this path has been altered from the default value of %SystemDrive%\ProgramData value, the issue is caused by Windows itself, as evidenced by the error code 17, which states: "The system cannot move the file to a different disk drive."