Invalid License: MD5 Checksum Has Been Depreciated Starting in 7.9.2
search cancel

Invalid License: MD5 Checksum Has Been Depreciated Starting in 7.9.2

book

Article ID: 446132

calendar_today

Updated On:

Products

Carbon Black EDR

Issue/Introduction

Attempting to install or or upload a license file into 7.9.2 or higher generates the following red toaster message in the console: 

Invalid License: MD5 checksum support has been depreciated for security reasons. Please obtain a new license with a SHA-256 checksum.
  • Subscription or renewal prior to June 13th 2026.

Environment

  • Carbon Black EDR Console: 7.9.2 or Higher

Cause

Licenses and RPM's generated prior to June 13th 2026 have an MD5 license file that is not supported. 

Resolution

Apply Hotfix 1 (HF1) for EDR 7.9.2 to migrate the license checksum back to SHA-256.

The HF can be downloaded from support.broadcom.com portal under Carbon Black EDR server 7.9.2. The file is called: (7.9.2-HF1-svr.zip)

Important Pre-installation Steps

  1. Stop EDR Services:
    1. Standalone: sudo /usr/share/cb/cbservice cb-enterprise stop
    2. Cluster (Primary Node): sudo /usr/share/cb/cbcluster stop
  2. License Check: Ensure the carbon-black-release RPM is on the system. Download the License RPM
  3. Deployment Scope: For cluster deployments, run this hotfix on the Primary node only.

Installation Procedure

Install the Hotfix RPM (7.9.2-HF1-svr-CRE-24354-1-4.noarch.rpm):

sudo rpm -ivh 7.9.2-HF1-svr-CRE-24354-1-4.noarch.rpm

The installation process will:

  • Validate the EDR version (7.9.2).
  • Verify services are stopped.
  • Perform an integrity check via rpm -V.
  • Migrate the license checksum to SHA-256 (no-op if already correct).

Post-installation Steps

Restart the CB EDR service:

  • Standalone: sudo /usr/share/cb/cbservice cb-enterprise start
  • Cluster (Primary Node): sudo /usr/share/cb/cbcluster start

Rollback

A backup of the original license file is created at /etc/cb/server.lic.bak prior to migration.

Warning: Restoring an MD5-checksummed backup on an EDR 7.9.2 system will cause the server to reject the license again. Rollback is only intended for use if the server is being downgraded to a pre-7.9.2 version.

To restore:

sudo cp /etc/cb/server.lic.bak /etc/cb/server.lic

Additional Information

  • Upgrading a Carbon Black EDR server to 7.9.2 or higher will automatically convert the existing license into the SHA256 checksum version.
  • Download the License RPM
Powered by Wolken Software