Symptoms

This article discusses the installation process for the VMware Carbon Black Cloud Endpoint sensor. Affected Products: VMware Carbon Black Cloud Endpoint Affected Operating Systems: WindowsMacLinux

Cause

Not applicable

Resolution

Note: Before installation, ensure that system requirements are validated. For more information, reference VMware Carbon Black Cloud Endpoint Sensor System Requirements. VMware Carbon Black Onboarding Part 2: System Requirements, Download, and Install Duration: 03:00Closed captions: Available in multiple languages For steps on installing VMware Carbon Black Cloud Endpoint, click on Windows, Mac, or Linux. Windows VMware Carbon Black Cloud Endpoint can be installed on Windows through the: User interface (UI)Command-line interface (CLI) Click the preferred method for more information. UI Double-click installer_vista_win7_win8_[BIT]_[VERSION].msi. Note: [BIT] = 32 or 64-bit The example screenshots use the 64-bit installer. [VERSION] = Version of the VMware Carbon Black Cloud Endpoint sensor The [VERSION] in the screenshot may differ in your environment. To obtain the installer, reference How to Download the VMware Carbon Black Cloud Endpoint Sensor. In the Setup UI, click Next. Accept the terms in the License Agreement and then click Next. Populate the activation code and then click Install. Note: For more information, reference How to Obtain the VMware Carbon Black Cloud Endpoint Activation Code.The activation code in the example will differ in your environment. If User Account Control (UAC) is enabled, click Yes. Otherwise, go to Step 6. Click Finish. CLI Note: CLI installation requires: The VMware Carbon Black Cloud company code. For more information, reference How to Obtain the VMware Carbon Black Cloud Endpoint Company Code.Access to the installer. For more information, reference How to Download the VMware Carbon Black Cloud Endpoint Sensor. SwitchRequiredPurpose/iYesInstalls the product./passiveNoThe installer shows a minimal UI with no prompts./qYesSuppresses UI and prompts./L*NoCreates an .msi install log file./L*vxNoCreates a verbose .msi install log file. This is recommended over /L* for troubleshooting. ParameterValueRequiredPurposeAUTO_UPDATE=0NoDisables auto update.1 (Default)Enables auto update from VMware Carbon Black Cloud.BACKGROUND_SCAN=0NoDisables background scan from running on a device.1 (Default)Enables background scan from running on a device.BASE_IMAGE=0 (Default)NoDefault operation for basic installation.1Used to create base images for cloning. This option is not supported for VDI.BYPASS=0 (Default)NoSends active communication to the cloud.1Sets the sensor in bypass mode. Bypass mode does not send any data to the cloud. Used for interoperability testing.CBLR_KILL=0 (Default)NoEnables Live Response functionality.1Disables Live Response functionality.CLI_USERS=See ExamplesNoIdentifies the activation code that is associated with the hostname. Only used with Directory User Integration.COMPANY_CODE=See ExamplesYesTies the sensor to the VMware Carbon Black Cloud console. Enclose the code in double quotation marks.CONNECT_LIMIT=See ExamplesNoLimits the number of connections per hour. Default is no limit.DELAY_SIG_DOWNLOAD=0NoImmediately download signature definitions.1 (Default)Delay signature definition downloads. Recommended to use when in production.FILE_UPLOAD_LIMIT=See ExamplesNo4-byte integer representing MB. Example: A value of 3 is a limit of 3*1024*1024 bytes. The default value is 5.GROUP_NAME=See ExamplesNoMethod to assign the device to a specific policy aside from automatic assignment. Enclose with double quotes if the policy name includes spaces.HIDE_COMMAND_LINES=0 (Default)NoShows command-line inputs.1Obfuscates command-line inputs.LAST_ATTEMPT_PROXY_SERVER=See ExamplesNoSensor attempts cloud access by using this value as a failover when all other methods fail.LEARNING_MODE=See ExamplesNoValue is the number of hours after sensor install to limit event types. This parameter reduces the load on the backend and reduces reporting.PROXY_PASSWD=See ExamplesNoPassword to use with PROXY_USER.PROXY_SERVER=See ExamplesNoIP Address or FQDN for Proxy Server. Format: Server.domain.com:PortNumberPROXY_USER=See ExamplesNoUser credential for PROXY_SERVER.QUEUE_SIZE=See ExamplesNoLimits the event backlog in MB. The default value is 100 MB. This option does not include SSL overhead.RATE_LIMIT=See ExamplesNoLimits the amount of data transfer (KB) per hour. Default is no limit.VDI=0 (Default)NoStandard deployment method.1Configured required for VDI deployments.USER_EMAIL=See ExamplesNoEmail address that is tied to a specific sensor. CLI Installation Examples: Note: The examples may differ in your environment.[VERSION] = Version of the VMware Carbon Black Cloud Endpoint sensor. Example #1 msiexec /q /i installer_vista_win7_win8-64-3.4.0.1091.msi /L* COMPANY_CODE="ABCD1234#EFGH56789@IJKLM" AUTO_UPDATE=0 GROUP_NAME=Accounting BASE_IMAGE=1 Example #1 contains: Installer = installer_vista_win7_win8-64-3.4.0.1091.msiBit = 64 bitVersion=3.4.0.1091MSI Logging = YesMSI Location= %Temp% Default value since not defined Company Code = ABCD1234#EFGH56789@IJKLMAuto update enabled= NoBase Image = YesBypass mode = No Default value since not defined Group assigned = AccountingProxy Server = None Default value since not defined Live Response functionality= Enabled Default value since not defined Learning mode= No Default value since not defined Rate limit= No limit Default value since not defined File upload limit= 5.2 MB Default value since not defined Example #2 msiexec /q /i installer_vista_win7_win8-32-3.4.0.1091.msi /L*vx "C:\CBInstall.txt" COMPANY_CODE="ABCD1234#EFGH56789@IJKLM" BYPASS=1 PROXY_Server="server.domain.com" PROXY_USER=example@domain.com PROXY_PASSWD="P@55w0rd" LEARNING_MODE=48 CBLR_KILL=1 RATE_LIMIT=2088 Example #2 contains: Installer = installer_vista_win7_win8-64-3.4.0.1091.msiBit = 64 bitVersion=3.4.0.1091MSI Logging = Yes with verbosity enabledMSI Location= C:\CBInstall.txtCompany Code = ABCD1234#EFGH56789@IJKLMAuto update enabled= Yes Default value since not defined Base Image = No Default value since not defined Bypass mode = No Default value since not defined Group assigned = None specified. Default value since not definedDevice is assigned based on auto-assignment cloud settings. Proxy server = server.domain.com Proxy user = example@domain.comProxy user password = P@55w0rd Live Response functionality= DisabledLearning Mode= 48 hoursRate limit= 2088 KB (2 MB) /per hour.File upload limit= 5.2 MB Default value since not defined Mac VMware Carbon Black Cloud Endpoint can be installed on Mac through the: User interface (UI) Click the appropriate method for more information. UI Double-click confer_installer_mac-[VERSION].dmg. Note: [VERSION] = Version of the VMware Carbon Black Cloud Endpoint sensor The [VERSION] in the screenshot may differ in your environment. To obtain the disk image, reference How to Download the VMware Carbon Black Cloud Endpoint Sensor. Double-click CbDefenseInstall.pkg. Click Continue. Click Continue. Review the end user license agreement (EULA) and then click Continue. Agree to the EULA. Populate the install code and then click Continue. Note: For more information, reference How to Obtain the VMware Carbon Black Cloud Endpoint Activation Code.The install code in the example will differ in your environment. Click Install. Populate an administrator’s User Name and Password. Once populated, click Install Software. On installation, click Close. Warning: Post installation, VMware Carbon Black Cloud Endpoint sensors that are installed on macOS 10.13 (High Sierra) or later require KEXT approval. For more information, reference How to Allow Dell Data Security Kernel Extensions on macOS. Post installation, VMware Carbon Black Cloud Endpoint sensors that are installed on macOS 10.14.5 (Mojave) or later require Full Disk Access. For more information, reference How to Grant Full Disk Access for VMware Carbon Black Cloud Endpoint. Linux VMware Carbon Black Cloud Endpoint can be installed on Linux through the: User interface (UI) Click the appropriate method for more information. UI Open Terminal. In Terminal, type sudo tar –xvf'/FilePathA/cb-psc-sensor.tgz ' –C /FilePathB and then press Enter. Note: In the above example: FilePathA is the path where the tar.gz exists. FilePathA example = /home/administrator/Downloads/ FilePathB is the path where the tar.gz is being extracted. FilePathB example = /home/administrator/Desktop/cb To obtain cb-psc-sensor.tgz, reference How to Download the VMware Carbon Black Cloud Endpoint Sensor.Commands are case-sensitive.The example paths may differ in your environment. Populate the password for the account being used and then press Enter. Type sudo 'filepath/install.sh' [COMPANYCODE] into Terminal and then press Enter. Note: [COMPANYCODE] = The VMware Carbon Black Cloud tenant code. For more information, reference How to Obtain the VMware Carbon Black Cloud Endpoint Company Code.[COMPANYCODE] is not case-sensitive.[COMPANYCODE] will differ in your environment. Populate the password for the account being used and then press Enter. Type exit and then press Enter. To contact support, reference Dell Data Security International Support Phone Numbers.Go to TechDirect to generate a technical support request online.For additional insights and resources, join the Dell Security Community Forum.

Support Cases