Configure Sensor Not To Require CRL Checks On Install

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to install the Sensor with CRL checking disabled

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.4.0.925 and higher
• Microsoft Windows: All Supported Versions

Resolution

• During unattended Install of CB Defense Sensor add the following parameter

  msiexec.exe /q /i CBDefense-setup.msi /L*vx log.txt CURL_CRL_CHECK=0 <other parameters as needed for CBDefense_msi_command_options>

• For sensor 3.8.0.722 and higher review How to Adjust CRL checking for Best Effort for other options

Additional Information

• This will add the following line to the cfg.ini file

CurlCrlCheck=false

• This will prevent the Sensor from using CRL communication but continue functioning normally otherwise. 

WARNING:

• Additional information can be found about What are some concerns with disabling the CRL check within the Sensor?