Sensors Fail to Automatically Upgrade

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Sensors have not upgraded over several days.
• Mac OS endpoints are failing with error.

  • Cb Response kernel extensions failed to load. Endpoint must be restarted to complete upgrade

Environment

• CB EDR Server: 6.x and later
• Microsoft Windows: All Supported Versions
• Mac OS: All Supported Versions

Cause

Auto-upgrade is enabled for all sensors.  The maximum upgrade threshold is being reached due to the constant Mac upgrade failures.

Resolution

• Confirm MDM allows the Mac upgrades.
• Reboot the Mac endpoints to complete the upgrade.
• Temporarily disable auto-upgrades for Mac OS sensors allowing the other sensors to upgrade.

Additional Information

• Use of auto-upgrade should be used on a small test group.
• Company-wide rollouts of new sensor versions should be tested before upgrading.EA-14362