Environment
- App Control Console: All Supported Versions
- App Control Agent: 8.0.x - 8.5.x
- USB Device originally attached while a matching Agent version was installed
Symptoms
- USB device was first attached while Agent 8.5.x (or lower) was installed.
- USB device being reported with the Device Class: SCSI Device.
- Unable to issue an Approval for the USB device due to being a Non-removable Device.
Cause
A defect in the Agent was not correctly identifying some devices as 'Removable'. This defect was tracked under EP-7979 and fixed with the release of Agent version 8.6.0.
Resolution
Upgrading to Agent version 8.6.0 or higher will prevent this issue. However, if the device_id was first seen by an impacted Agent version, the issue on the Server may persist.
To alter the Removable state of a device first seen by an impacted Agent version:
- Log in to the application server as the Carbon Black Service Account.
- Use SQL Server Management Studio to execute the following query:
use das; select device_id, host_id, first_seen_date, name, vendor, friendly_name, is_removable from devices (nolock)
- Locate & verify the relevant device_id
- Using the device_id in place of X, adjust the device's status with the following query:
use das; UPDATE devices SET is_removable=1 WHERE device_id=X
- Attempt to issue the Approval.
Additional Notes
Related Content
