EDR: How to prevent EDR server upgrade when performing a general server update

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Prevent EDR from upgrading to latest version when performing a general "yum upgrade"

Environment

• EDR Server:  All Versions

Resolution

• Option 1: Disable the CarbonBlack yum repository (master and minions in case of a cluster):

1. Edit /etc/yum.repos.d/CarbonBlack.repo using vi or similar tool
2. Change enabled=1 to enabled=0 in the file: 
3. Save the file

• Option 2: Instead of running "yum update", the administrator can run the same command with the CarbonBlack.repo disabled.  

  • yum --disablerepo="CarbonBlack.repo" update

Additional Information

When implementing option 1, set enabled=1 to re-enable the CarbonBlack.repo when upgrading the EDR server software or in cases where access to the Carbon Black repository is required to install a new sensor version.