Carbon Black Cloud: Signature updates fail when missing 3rd Party Certificate Authority

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Signature updates are outdated in the Carbon Black Cloud console

Environment

• Carbon Black Cloud Console: All Supported Version
  • Endpoint Standard (Formerly CB Defense)
• Carbon Black Cloud Windows Sensor: All Supported Versions

Cause

The Windows Certificate store is missing the correct DigiCert CA
 

Subject Name: DigiCert SHA2 Extended Validation Server CA
thumbprint:7E2F3A4F8FE8FA8A5730AECA029696637E986F3F

Resolution

1. Download the CA here 
2. Run mmc.exe as an Administrator
3. Click File > Add/Remove Snap-in > Certificates
4. Select radial button next to Computer Account > Next > Local Computer
5. Expand Certificates > Third Party Root Certification Authorities
6. Right Click Certificates sub folder > All Tasks > Import
7. Choose file from Step #1

Additional Information

How to import third-party certification authority (CA) certificates into the Enterprise NTAuth store