Carbon Black Cloud: Can the Sensor Be Uninstalled While in Bypass or Quarantine?
search cancel

Carbon Black Cloud: Can the Sensor Be Uninstalled While in Bypass or Quarantine?

book

Article ID: 289644

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Is it possible to uninstall a Sensor that is in Bypass or Quarantine status?

Environment

  • Carbon Black Cloud Console: All Versions
  • Carbon Black Cloud Sensor: All Supported Versions

Resolution

Yes, a Sensor in either status can be uninstalled through supported means.

Additional Information

  • If a Sensor is in a Policy where 'Require code to uninstall sensor' is enabled, then the Deregistration or Uninstall Code is required for command line uninstalls.
  • Sensors uninstalled via the Console will process the request after their next successful check-in.
  • Sensors in Bypass due to an Error status (e.g. System ext. not approved) may first require remediation before an uninstall will complete successfully.