4.1 Sensor Fails to Install on Unpatched Windows Server Where 4.0.3 Does Install

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

• When upgrading or installing the 4.1 sensor it fails even though 4.0.3 or earlier was installed or installs successfully
• Error messages in install log may include

  CACheckServiceSupportedOS:  CustomActionManager::SetLastErrorMessage: Failed to execute C:\Program Files\Confer\RepCli.exe: error = 577, error detail = Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  CACheckServiceSupportedOS:  ERROR     CACheckServiceSupportedOS: Please verify that this OS supports Trusted Signing (KB5022661)

 

Environment

• Carbon Black Cloud Windows Sensor: 4.1
• Microsoft Windows: Server 2012 R2, 2016, or Windows 10

Cause

Issue related to issue with OS reading certificate on repcli.exe due to missing patches

Resolution

Make sure the OS is fully patched some updates that have been seen to resolve the issue are below

• Upgrading to 22H2 from Windows 10 21H2
• Installing KB5006729 on Windows Server 2012 R2
• Installing KB5012170 on Windows Server 2016

Additional Information

Related issue on older sensor version with older OS versions