Cb Response: Administrators Locked Out of Console

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Administrators are unable to login to console due to forgotten account details
• No other admin level accounts are accessible or available
• Default admin account is inaccessible

Environment

• Cb Response Server: All Supported Versions
• Linux: All Supported Versions

Cause

• Administrative user(s) do not have access to their accounts or the admin account created during install.

Resolution

1. Log into the response server
2. Navigate to /usr/share/cb
3. Run the following command:

./cbuser add -u UserName -f FirstName -l LastName -g -p Password

4. Log into console with newly created user

Additional Information

• The "-g" argument in the command with give the user global admin privileges
• Arguments listed in command are the minimum requirements to add a user
• To list available arguments, run
  • ./cbuser add -h