EDR: What Sensor Versions Support Certificate Management for Communication?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What Sensor Versions Support Certificate Management for Communication?

Environment

• EDR (formerly Cb Response) Console: 6.4.0 and above
• EDR Sensor: 6.2.3 and above
  • Microsoft Windows: All Supported Versions
• EDR Sensor: 6.2.5 and above
  • Apple macOS: All Supported Versions

Resolution

Operating System	Version
Microsoft Windows	6.2.3 and Higher
macOS	6.2.5 and Higher
Linux (RHEL/Centos/Suse)	6.3.0 and Higher (Server 7.1.0 or higher required)

Additional Information

• Windows XP, Windows Vista, and Server 2003 will not support TLS certificate swap. These sensors should be using 6.1.x versions
• EDR server 6.4.0 or Higher is required for Windows and Mac. EDR server 7.1.0 or higher is required for Linux.
• Certificate Management feature addresses: CVE-2004-2761 - SSL Certificate Signed Using Weak Hashing Algorithm