Hosted EDR Instance is No Longer Accessible

Products

• Carbon Black EDR
• Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

A Hosted EDR Instance is no longer accessible after March 28, 2025

Environment

• Carbon Black EDR Hosted: All Versions

Cause

Instance has been destroyed due to end of product life. 

Resolution

Only instances with valid licenses past March 28, 2025 will remain running until the license has expired. 

Announcements regarding the end of life and final notice. 

• Announcement: No Further Updates to Carbon Black Hosted EDR
• Final Reminder: Hosted EDR EOL on March 28, 2025 & Tamper Protection Disablement

Additional Information

• Although a grace period may exist following license expiration, Hosted EDR customers are not entitled to continued access to the Hosted EDR console nor to the continuation of normal product functionality once their licenses expire. Carbon Black reserves the right to delete a Hosted EDR instance following license expiration.
• Tamper protection was disabled a few days prior to the destruction of the instances. Any sensor that still has tamper protection enabled will need to go through one of these steps to uninstall. 
  • Tamper Protection Password History is Currently Removed when the Group is Deleted
  • Open a support case to get the last associated tamper password for the endpoint and follow method 2: Disable Tamper Protection On The Windows Sensor