Endpoint Standard: Can the CRL Check be Re-Enabled After the Sensor is Installed?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Is it possible to re-enable the CRL check after installing the sensor? 

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.3.x.x and higher
• Microsoft Windows: All supported versions

Resolution

1. Put the sensor into bypass
2. Edit cfg.ini
3. Add the line CurlCrlCheck=true
4. Take the sensor out of bypass
5. Run "c:\program files\confer\repcli" updateconfig

Additional Information

• To re-enable the CRL check without repcli, it will require an uninstall/install of the sensor