How to Generate "Code Requirement" For Granting Sensor Full Disk Access

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

Generate the identifier string for the "Code Requirement" portion of the Privacy Preferences payload to grant Full Disk Access (FDA) to Sensor through Jamf policy

Environment

• Carbon Black Cloud MacOS Sensor: 3.2.1.10 - 3.4.x.x
• Apple macOS: 10.14.5 - 10.15.x (pre-Big Sur)
• Jamf Pro: 10.9 and higher

Resolution

1. Open Terminal on the machine running the Sensor
2. Run this command to generate the identifier string

   codesign -dr - /Applications/Confer.app/Contents/MacOS/CbDefense

3. Copy the output in its entirety into the Code Requirement section of the Privacy Preferences payload

Additional Information

• Sometimes errors can occur as a result of copying and pasting the identifier string from a Web Browser, so manual generation of the identifier string is a good troubleshooting step
• Jamf documentation on granting FDA can be found here
• Carbon Black recommends granting the Sensor Full Disk Access