Does the sensor verify if a certificate is expired during check-in?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Will a sensor stop checking into the server if the certificate is expired? 

Environment

• EDR Server: All Versions
• EDR Sensor: All Versions

Resolution

• By default, the sensor does not check the certificate expiration date when communicating with the server. 
• To enable date checking
  1. Edit /etc/cb/nginx/conf.d/includes/cb.server.sensor
  2. Change ssl_verify_client to on

     • ssl_verify_client on;