Sensor Offline After Upgrade to 3.9.x and Higher

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

• After upgrading to sensor version 3.9 or Higher the sensor is no longer communicating with the cloud
• Logs may show the error SEC_E_ILLEGAL_MESSAGE (0x80090326)

Environment

• Carbon Black Cloud Windows Sensor: 3.9.x and Higher
• Windows OS: All Supported Versions

Cause

A TLS version higher then the network can support is enabled on the OS

Resolution

 A tool like IISCrypto can be used to make sure that the OS is trying to use a TLS version which is supported on the network

Additional Information

SSL Cipher Suites Supported