How to Disable the Automatic Refresh of the Communication Key File (keychain.json)

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

The communication key file (keychain.json) refreshes automatically once a year (31536000 sec) triggered by a scheduled task.

The automatic refresh happens without any warning in the console and this can cause issues for isolated environments where the file might need to be distributed in advance to an alternative download location.

These steps allow you to disable the scheduled task to prevent the unexpected refresh of the file.

Environment

App Control Server: 8.7+

Resolution

1. Open SQL Mgmt Studio with account that has write permissions (e.g. App C service account) and execute the following query:

   use das; update dbo.scheduled_tasks set enabled = 0 where task like 'CommunicationKeyRotator'

2. To verify the change of the task go to > Support.php > Scheduled Tasks > the 'CommunicationKeyRotator' task should be disabled

Additional Information

To manually generate a new communication key file (keychain.json) whenever needed just go to > System Configuration page > Security tab > Scroll to the bottom > Click the "Regenerate" button