How to download EDR sensor rpm packages from Broadcom packages web resource
search cancel

How to download EDR sensor rpm packages from Broadcom packages web resource

book

Article ID: 412677

calendar_today

Updated On:

Products

Carbon Black EDR

Issue/Introduction

This article is intended to explain the steps to download the Carbon Black EDR sensor rpm packages from pacakges.broadcom.com web page.

 

Resolution

  1. Login to support.broadcom.com and search for Carbon Black EDR under My Downloads
  2. Click on Carbon Black EDR Linux Sensor 
  3. Download the package cb-edr-lnx-sensor-7.4.0.24479.zip


  4. Go back to the window in step 2 above, and click on the green link button, and you will be presented with a pop-up window that lists the access token and the instructions to use cb-edr-lnx-sensor-7.4.0.24479.zip to generate the /etc/yum.repos.d/CarbonBlack.repo file


    The instructions will look like below:

    1. Navigate to the respective Carbon Black EDR Linux Sensor release folder in the Broadcom Support Portal and download the zip file containing the shell script and GPG keys
    2. Unzip the downloaded zip file. The file contains a generate_cbsensor_repo.sh shell script file and public keys (cb.asc and public.asc)
    3. Ensure that the script has proper executable permissions. If the file does not have the required permissions, set them by running the following command chmod +x generate_cbsensor_repo.sh.
    4. Run the script with sudo permissions sudo ./generate_cbsensor_repo.sh OR run the script as a root user and provide the username and access token, as prompted by the script.
    5. To configure GPG key verification for the CarbonBlack.repo
      1. Download cb.asc and public.asc files from support.broadcom.com portal. These files are already part of the zip file downloaded above.
      2. Configure the CarbonBlack.repo file by setting the gpgkey entries to the file paths of cb.asc and public.asc
        gpgcheck=1
        gpgkey=file:///[PATH]/cb.asc
        file:///[PATH]/public.asc
      3. Verify the [PATH] in CarbonBlack.repo and Replace with actual file location, if needed.


  5. Once the instructions are followed successfully, you will be able to either download the package you need from Linux machine used to generate the CarbonBlack.repo file using yum install command below, or use the baseurl from inside this repo file to open it in any web browser and download the rpm packages you need
    yum install --downloadonly --downloaddir=<package local download directory> <package>
  6. If you will prefer to download the rpm packages using a web browser, it is enough to open the whole url from under baseurl inside the CarbonBlack.repo in the web browser, this url has the credential to authenticate the user and access the repo in packages.broadcom.com  


    Note

    If your network is configured to allow/deny URLs, make sure that packages.broadcom.com is allowed together with the JFrog SaaS URL.
    See: https://jfrog.com/help/r/artifactory-what-urls-ips-should-i-add-to-an-allowlist-for-direct-cloud-storage-download-in-jfrog-saas/artifactory-what-urls/ips-should-i-add-to-an-allowlist-for-direct-cloud-storage-download-in-jfrog-saas 
    The SaaS vendor-provided list contains multiple URLs. However, you can only check and allow those URLs that exist within your geographical location.

Additional Information