How to download EDR sensor rpm packages from Broadcom packages web resource
search cancel

How to download EDR sensor rpm packages from Broadcom packages web resource

book

Article ID: 412677

calendar_today

Updated On:

Products

Carbon Black EDR

Issue/Introduction

This article is intended to explain the steps to download the Carbon Black EDR sensor rpm packages from pacakges.broadcom.com web page.

 

Resolution

  1. Login to support.broadcom.com and search for Carbon Black EDR under My Downloads
  2. Click the Registry Tokens button
  3. Select the appropriate Site ID and click Generate Token
  4. To copy the newly generated token, click the Copy Token button.
  5. Return to the My Downloads page.
  6. Click on Carbon Black EDR Linux Sensor 
  7. Select the appropriate Carbon Black EDR Sensor for the target endpoint operating system.


  8. Download the zip file containing the sensor script and GPG files, and execute generate_cbsensor_repo.sh
Note:
When you run the generate_cbserver_repo.sh script, it will prompt for your username and your access token.
Username corresponds to Email ID of the account that is used to sign in to the Broadcom Support Portal and the Access Token is the Registry Token that is generated and copied during the token creation process.

The instructions will look like this:

  1. Navigate to the respective Carbon Black EDR Linux Sensor release folder in the Broadcom Support Portal and download the zip file containing the shell script and GPG keys
  2. Unzip the downloaded zip file. The file contains a generate_cbsensor_repo.sh shell script file and public keys (cb.asc and public.asc)
  3. Ensure that the script has proper executable permissions. If the file does not have the required permissions, set them by running the following command chmod +x generate_cbsensor_repo.sh.
  4. Run the script with sudo permissions sudo ./generate_cbsensor_repo.sh OR run the script as a root user and provide the username and access token, as prompted by the script.
  5. To configure GPG key verification for the CarbonBlack.repo
    • Download cb.asc and public.asc files from support.broadcom.com portal. These files are already part of the zip file downloaded above.
    • Configure the CarbonBlack.repo file by setting the gpgkey entries to the file paths of cb.asc and public.asc
      gpgcheck=1
      gpgkey=file:///[PATH]/cb.asc
      file:///[PATH]/public.asc
    • Verify the [PATH] in CarbonBlack.repo and Replace with actual file location, if needed.
  6. Once the instructions are followed successfully, you will be able to either download the package you need from Linux machine used to generate the CarbonBlack.repo file using yum install command below, or use the baseurl from inside this repo file to open it in any web browser and download the rpm packages you need
  • yum install --downloadonly --downloaddir=<package local download directory> <package>

  • If you will prefer to download the rpm packages using a web browser, it is enough to open the whole url from under baseurl inside the CarbonBlack.repo in the web browser, this url has the credential to authenticate the user and access the repo in packages.broadcom.com  


Note

If your network is configured to allow/deny URLs, make sure that packages.broadcom.com is allowed together with the JFrog SaaS URL.
See: https://jfrog.com/help/r/artifactory-what-urls-ips-should-i-add-to-an-allowlist-for-direct-cloud-storage-download-in-jfrog-saas/artifactory-what-urls/ips-should-i-add-to-an-allowlist-for-direct-cloud-storage-download-in-jfrog-saas 
The SaaS vendor-provided list contains multiple URLs. However, you can only check and allow those URLs that exist within your geographical location.

Powered by Wolken Software