Carbon Black Cloud: Can the Sensor Be Uninstalled While in Bypass or Quarantine?
book
Article ID: 289644
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Is it possible to uninstall a Sensor that is in Bypass or Quarantine status?
Environment
Carbon Black Cloud Console: All Versions
Carbon Black Cloud Sensor: All Supported Versions
Resolution
Yes, a Sensor in either status can be uninstalled through supported means.
Additional Information
If a Sensor is in a Policy where 'Require code to uninstall sensor' is enabled, then the Deregistration or Uninstall Code is required for command line uninstalls.
Sensors uninstalled via the Console will process the request after their next successful check-in.
Sensors in Bypass due to an Error status (e.g. System ext. not approved) may first require remediation before an uninstall will complete successfully.