Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Server Services Missing After Reboot

App Control: Server Services Missing After Reboot

Environment

App Control Server: All Supported Versions
App Control Rules Installer: 1.10 -1.14

Symptoms

  • After reboot the App Control Server and Reporter services are missing in the Services console (services.msc)
  • Console unavailable due to Fatal Error: The Carbon Black App Control Console cannot connect to the database
  • App Control Server has been uninstalled/re-installed
  • App Control Agent is present on the same system as the App Control server app
  • Rules Installer versions 1.10 to 1.14 have been added previously

Cause

There is an issue introduced in the Rules Installer v1.10 that cause the agent's tamper protection to prevent clean uninstall of the App Control app leaving behind a "Delete" registry flag
Subsequently, the OS will delete the services after reboot which causes the App Control server failure


Resolution

  1. Uninstall/Re-install the App Control server app
  2. Add the latest Rules Installer v.1.16 available HERE
  3. Next either:
  • Apply the registry fix available HERE
  • Manually delete the following registry values if they exist:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityServer\DeleteFlag
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ParityReporter\DeleteFlag

Additional Notes

This issue EP-15460 has been resolved in the Rules Installer v1.16 per release notes

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-11-2022
Views:
430
Contributors