Carbon Black Cloud: How to Adjust CRL checking for Best Effort

[#1]

Environment

Carbon Black Cloud Console: All Versions 
Carbon Black Cloud Sensor: 3.8.0.722 and higher
Microsoft Windows: All Supported Versions

Objective

How to Adjust Curl for Best Effort

Resolution

Options:

1. During the unattended Install or upgrade of CB Defense Sensor add the following parameter

   msiexec.exe  /q /i CBDefense-setup.msi  /L*vx log.txt CURL_CRL_REVOKE_BEST_EFFORT=1 <other parameters as needed for CBDefense_msi_command_options>

2. Edit the Config file
   1. Place the sensor in Bypass mode.
   2. Locate your cfg.ini file
   3. Edit cfg.ini file adding this line.

      CurlCrlRevokeBestEffort=1

   4. Save and close cfg.ini 
   5. Load changes

      "C:\Program Files\Confer\RepCLI.exe" updateconfig

   6. Bring Sensor out of Bypass
   7. Check PSC Console for normal sensor communications, like check-ins and events

Additional Notes

The command line addition will add the following line to the cfg.ini file

CurlCrlRevokeBestEffort=1

 This will allow the Sensor to remain enabled and set to best effort but sensor communication continues if the CRL distribution point is unreachable.

WARNING:
  Additional information can be found about What are some concerns with disabling the CRL check within the Sensor?

Related Content

Carbon Black Cloud: How to Get Started With Bypass Mode
Carbon Black Cloud: Where is the cfg.ini file located for Windows Sensor?
Carbon Black Cloud: What are some concerns with disabling the CRL check within the Sensor?
Carbon Black Cloud: How To Configure Sensor Not To Require CRL Checks On Install
Carbon Black Cloud: Sensor Communication Blocked By CRL Checks And Cannot Reinstall Sensor