CB Response: How to install the RPM if accidentally removed

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Re-install the Response RPM if accidentally removed

Environment

• CB Response Server: All Versions

Resolution

1. If the server was not running the most recent version, update CarbonBlack.repo to the desired version URL before installing

   • curl --key /etc/cb/certs/carbonblack-alliance-client.key --cert /etc/cb/certs/carbonblack-alliance-client.crt "https://yum.distro.carbonblack.io/enterprise/" | grep href | cut -d '"' -f 2 | cut -d '/' -f 1

2. Modify /etc/yum.repos.d/CarbonBlack.repo with the desired baseurl from above:

   • baseurl=https://yum.distro.carbonblack.io/enterprise/<version>/x86_64/

3. Clear yum cache:

   • yum clean all

4. Re-install

   • yum install cb-enterprise