Connect an XP or Server 2003 Agent to the Console

search cancel

book

calendar_today

Carbon Black App Control (formerly Cb Protection)

How to connect an Agent installed on Windows XP or Windows Server 2003 to the App Control Server

Verify the endpoint can reach the Server Address (System Configuration > General) for the App Control Server.
Verify that Windows Server 2003 and XP are updated to the latest Service Pack with all Hotfixes applied.
- Server 2003 requires KB3072630 and KB948963 for AES Ciphers support
Verify that the Operating System hosting the App Control Server and the client Server 2003/XP OS have a matching TLS Protocol/Ciphers Suites

A Matching Protocol can be:
- - TLS 1.0 (This is the highest TLS version available for Server 2003 and XP)
A Matching Cipher Suite can be:

- - TLS_RSA_WITH_AES_128_CBC_SHA (Server 2003 requires KB3072630 and KB948963)
  - TLS_RSA_WITH_AES_256_CBC_SHA (Server 2003 requires KB3072630 and KB948963)
  - TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
  - TLS_RSA_WITH_3DES_EDE_CBC_SHA

Typically TLS/Cipher Suites modifications must be done via the TLS Registry Settings, or by managing TLS via GPO ,or with a 3rd party tool like IISCrypto (use v1.6 for Server 2003)
Assistance in editing the TLS & Cipher Suites in the Operating System may require support from Microsoft.
Windows XP or Windows Server 2003 must be updated to the latest Service Pack with all Hotfixes applied.
The AES Ciphers Suites on Server 2003 require installation of KB3072630, and the KB948963 patch which is no longer available for download by Microsoft.
One can request KB948963 directly from Microsoft or download from a 3rd party file repository like VirusTotal (requires account).
Windows Server 2022 does not support 3DES and older Cipher Suites by default

thumb_up Yes

thumb_down No