Environment
- Carbon Black Cloud Console: All Versions
- Endpoint Standard Local Mirror Server
- Microsoft Windows: All Supported Versions
- Carbon Black Cloud Sensor: 3.8.0.684 and Higher
- Microsoft Windows: All Supported Versions
Symptoms
- The Local Mirror server has not been able to update Signature pack versions.
- No alerts are shown in the console.
Cause
This as a result of our decision to retire pre-TLS 1.2 on our servers. As a result the update is attempting to write to a protected folder and is being prevented by tamper protection.
Resolution
This issue is being worked on by our Engineering team and until a fix is created the workaround is to put the sensor in bypass on the mirror server.