The threat intel page is blank or is not updating the feeds when enabled. In the /var/log/cb/coreservices/debug.log the following 400 error is seen.
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: https://api.alliance.carbonblack.com/api/v1/feeds/?negative_scores=True&ioc_type_class=True&ioc_type_query=True&version=7.8.0.230722.708
Environment
Carbon Black EDR Server: All Versions
Cause
carbonblack-alliance-client.crt is expired
Resolution
From the entitlements page for the EDR licenses, download the .rpm file with 1.0.4 or higher in the filename
If the rpm does not exist, reach out to support to generate the RPM file.
Move the .rpm file onto the backend of the EDR server in a terminal session.