Carbon Black Cloud: How To Configure Sensor Not To Require CRL Checks On Install

[#1]

Environment

• Carbon Black Cloud Console: All Versions (formerly CB PSC)
• Carbon Black Cloud Sensor: 3.4.0.925 and higher
• Microsoft Windows: All Supported Versions

Objective

How to install the Sensor with CRL checking disabled

Resolution

• During unattended Install of CB Defense Sensor add the following parameter

  msiexec.exe  /q /i CBDefense-setup.msi  /L*vx log.txt CURL_CRL_CHECK=0 <other parameters as needed for CBDefense_msi_command_options>

• For sensor 3.8.0.722 and higher review Carbon Black Cloud: How to Adjust CRL checking for Best Effort for other options

Additional Notes

• This will add the following line to the cfg.ini file

CurlCrlCheck=false

• This will prevent the Sensor from using CRL communication but continue functioning normally otherwise. 

WARNING:

• Additional information can be found about What are some concerns with disabling the CRL check within the Sensor?

Related Content

Carbon Black Cloud: Sensor not connecting via proxy/firewall
Carbon Black Cloud: Sensor Communication Blocked By CRL Checks And Cannot Reinstall Sensor
Carbon Black Cloud: Does Disabling the CRL Check on Sensors Open Communications to Man in the Middle...
Carbon Black Cloud: What are some concerns with disabling the CRL check within the Sensor?  
Carbon Black Cloud: How to Adjust CRL checking for Best Effort