Carbon Black Cloud: Sensor Installation stuck at "RunInf: Install for ctinet.inf"

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• When running the msi, it starts but gets stuck right away at:

  "Installing CB Defense Sensor v3.4.0.1070 64 BIT, please wait...".

• When running the msi through CLI, it finishes right away reporting the below error in confer-temp.log:

  07/02/20 20:20:13: 11b4     1 install: InstallAll: file filter
  07/02/20 20:20:13: 11b4     1 install: RunInf: Install for ctifile.inf
  07/02/20 20:20:13: 11b4     1 install: RunInf: success
  07/02/20 20:20:13: 11b4     1 install: InstallAll: network filter
  07/02/20 20:20:13: 11b4     1 install: RunInf: Install for ctinet.inf

• Receive Segment Coalescing is enabled

Environment

• Carbon Black Cloud (Formerly PSC) Sensor: All Versions
• Microsoft Windows: Server 2012, Server 2016

Cause

The network interface card driver does not fully support Receive Segment Coalescing (RSC)

Resolution

1. Disable RSC: 
   • https://community.carbonblack.com/t5/Knowledge-Base/CB-Defense-Sensor-Install-Hangs-If-Receive-Segment-Coalescing-is/ta-p/62277
2. Run sensor install as normal (Attended/Unattended Install)

Additional Information

• This has been historically seen with VirtIO Nutanix but may occur in other setups if the NIC driver does not properly support RSC.
• Updating the NIC driver may also help alleviate the issue