Failed To Register: We Couldn’t Connect to the Cloud Due to an Untrusted Connection.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Sensor installation fails
• Install log shows:

  We couldn't connect to the cloud due to an untrusted connection. The certificate chain was issued by an authority that is not trusted.
  CA:InstallPreCheck:  Error 0x80004005: CAInstallPreCheck: Failed to register: We couldn't connect to the cloud due to an untrusted connection. The certificate chain was issued by an authority that is not trusted.
  CustomAction CustomActionId.InstallPreCheck returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

• Event Viewer shows:

  Event ID 36871
  A fatal error occurred while creating an SSL client credential. The internal error state is 10013.
  Event ID 36887
  A fatal alert was received from the remote endpoint. ​The TLS protocol defined fatal alert code is 40.

Environment

• Carbon Black Cloud Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions

Cause

Misconfigured TLS/Cipher Suites

Resolution

• Work with your networking team to reconfigure TLS/Cipher Suites
• Supported Cipher Suites: 
  • What SSL cipher suites are supported/accepted for communications?

Additional Information

Which version of SSL/TLS does the Sensor use? (Windows)