Carbon Black Cloud Sensor: Sensor Upgrade Fails on Windows Server 2019

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• System tray icon no longer appearing on endpoint (or shows the sensor as being in bypass mode)
• Check-ins no longer occurring
• CB Defense service may also show as stopped

Environment

• Carbon Black Cloud Sensor: All
• Windows Server 2019

Cause

A known issue (DSEN-10334) in ctinet where driver is not unloading during upgrade process

Resolution

• This issue has been resolved and should no longer be present when upgrading from 3.5.0.1813 or later, as mentioned in the release notes

 

• If upgrading from a sensor older thank 3.5.0.1813, the following workaround is available
  1. Move endpoint into bypass
  2. Reboot
  3. Perform upgrade
  4. Remove endpoint from bypass