IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: How to Enable or Disable Per-Agent CLI Password

App Control: How to Enable or Disable Per-Agent CLI Password


  • App Control Agents: All Supported Versions
  • App Control Console: All Supported Versions


To disable or enable the use of per-Agent CLI Passwords.


Warning: Carbon Black now recommends using the options in Agent Management instead, as per-Agent CLI Passwords are low entropy.
  1. Log in to the Console and navigate to https://ServerAddress/shepherd_config.php
  2. Find defined property "ShowDascliPasswordInConsole"
  3. Set Property Value accordingly:
    • Show the per-Agent Password in Console: true
    • Hide the per-Agent Password in Console: false
  4. Navigate to https://ServerAddress/agent_config.php
  5. Add a filter for Value > begins with > accept_cli
  6. Edit (pencil icon) the relevant Agent Config accordingly:
    • Accept per-Agent CLI Password: accept_cli_password=1
    • Do not accept per-Agent CLI Password: accept_cli_password=0

Additional Notes

  • Existing Agents must be in a Connected state to receive the necessary changes.
  • This feature was disabled by default beginning with the release of both Server and Agent version 8.1.4.

Related Content

Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Creation Date: