EDR: How to Install a Different Server Version

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Install a version of EDR other than the most recent release.

Environment

• EDR (formerly CB Response): 4.x and Higher

 

Resolution

1. Get repo version URLs currently available Modify /etc/yum.repos.d/CarbonBlack.repo with the desired baseurl from above:

   •  curl --key /etc/cb/certs/carbonblack-alliance-client.key --cert /etc/cb/certs/carbonblack-alliance-client.crt "https://yum.distro.carbonblack.io/enterprise/" | grep href | cut -d '"' -f 2 | cut -d '/' -f 1

   • baseurl=https://yum.distro.carbonblack.io/enterprise/<version>/$releasever/$basearch

2. Clear yum cache:

   • yum clean all

3. Stop services

   • Standalone:
     service cb-enterprise stop
     
     Cluster:
     /usr/share/cb/cbcluster stop

     
      
4. Update cb-enterprise

   • yum update cb-enterprise

Additional Information

• Complete these steps across all nodes if a clustered environment. All nodes (Master and Minions) should be on the same version

• To update to the latest version, the URL must be updated to the stable branch available in the latest release notes