Dascli Password Error: "Access Denied. Bad Password." After Agent Upgrade to 8.10.4

Products

• Carbon Black App Control

Issue/Introduction

• Dascli Password <password> command giving error "Access Denied. Bad Password" after upgrading the agent
• Dascli Password has not been changed for an extended period of time

Environment

• Carbon Black App Control Agent: 8.10.4

Cause

• CLI password has been changed since before App Control version 8.5 (released in 2021).
• App Control 8.5 introduced sha256 hashing of the password

Resolution

1. Log into the App Control database server
2. Within SQL Management Studio, run the command:

   select name,value,date_modified from das.dbo.shepherd_configs with(nolock) where name like 'dascli%'

3. If there is not a "DascliPasswordHashSha256" value, then that indicates the password has not been changed since before version 8.5. It will need to be changed to work with current agents.
4. See Configuring Agent Management via User / Group or Global CLI Password for steps to reset the password.