Per-Agent CLI Passwords Missing in Computer Details

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Why are per-Agent CLI passwords missing in Server versions 8.1.4 and Higher?

Environment

• App Control Server: 8.1.4 and higher
• App Control Agent: 8.1.4 and higher

Cause

By design the endpoint specific CLI password was low entropy and the decision was made to disable these by default with the release of version 8.1.4.

Resolution

The use of a specific User/Group or a Global Password is now the recommended method for Agent authentication and management.

Additional Information

• If desired the per-Agent CLI functionality could be re-enabled, though it is not recommended.
• Enabling the per-Agent CLI will become a Configlist Entry and the Agent must receive that change from the Server before it can be used.