Non-VDI Sensors Auto-Deregister With BASE_IMAGE=1 Set

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Sensors auto-deregistering daily
• Sensor is not part of VDI

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.6.x and Below

Cause

When BASE_IMAGE=1 the backend treats the sensor as a VDI device for its lifetime, including automated deregistration

Resolution

• This behavior has not been seen in supported sensor versions listed here
• Please upgrade to a supported sensor version

Additional Information

• Disabling auto-deregistration will stop both VDI and non-VDI machines from auto-deregistering
• If the original base image is uninstalled the existing sensors should still communicate but new sensors using that original deviceID will not register