Custom Certificate for Sensor Communication is Failing to Upload with "Missing Key Usage Extension".

Products

• Carbon Black EDR

Issue/Introduction

When uploading a custom certificate in the console for sensor communications, an error is displayed. 

Missing Key Usage Extension

The same error is seen with /usr/share/cb/cbssl certs --scan

Environment

• Carbon Black EDR: All Versions

Cause

The certificate requires the key usage extensions. 

Resolution

Add the following key usage extensions when generating the certificate: 

keyUsage = digitalSignature, keyAgreement