Carbon Black Cloud: Unable to Disable Bypass on MacOS
search cancel

Carbon Black Cloud: Unable to Disable Bypass on MacOS

book

Article ID: 289780

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why can't bypass be disabled on MacOS?

Environment

  • Carbon Black Cloud (formerly PSC) Web Console: All Versions
  • Carbon Black Cloud Sensor: All Versions
  • Apple MacOS: All Versions

Cause

This can happen if sensors are installed or upgraded on a MacOS that isn't supported for that sensor version or if sensors do support the OS but the sensor was unable to install or initialize the driver (i.e. kext was not approved)

Resolution

To verify if the version of MacOS isn't supported for the installed sensor version enter the following search in the Endpoints page. These sensors may need to be upgraded to a version which supports this version of MacOS:
sensorStates:UNSUPPORTED_OS

If the sensor version does support the MacOS version enter the following search in the Endpoints Page to verify if the sensor was unable to initilize the driver. These devices may need to have kext approved:
sensorStates:DRIVER_INIT_ERROR