Carbon Black Cloud: How to Adjust CRL checking for Best Effort

[#1]

Environment

Carbon Black Cloud Console: All Versions 
Carbon Black Cloud Sensor: 3.8.0.722 and higher
Microsoft Windows: All Supported Versions

Objective

How to Adjust Curl for Best Effort

Resolution

Options:

1. During the unattended Install or upgrade of CB Defense Sensor add the following parameter

   CURL_CRL_REVOKE_BEST_EFFORT=1

   1. Refer to the Unintended installations KB HERE for addition variables and command line options. 
2. Edit the Config file
   1. Place the sensor in Bypass mode.
   2. Locate your cfg.ini file
   3. Edit cfg.ini file adding this line.

      CurlCrlRevokeBestEffort=1

   4. Save and close cfg.ini 
   5. Load changes

      "C:\Program Files\Confer\RepCLI.exe" updateconfig

   6. Bring Sensor out of Bypass
   7. Check PSC Console for normal sensor communications, like check-ins and events

Additional Notes

The command line addition will add the following line to the cfg.ini file

CurlCrlRevokeBestEffort=1

 This will allow the Sensor to remain enabled and set to best effort but sensor communication continues if the CRL distribution point is unreachable.

WARNING:
  Additional information can be found about What are some concerns with disabling the CRL check within the Sensor?

Related Content

Carbon Black Cloud: How to Get Started With Bypass Mode
Carbon Black Cloud: Where is the cfg.ini file located for Windows Sensor?
Carbon Black Cloud: What are some concerns with disabling the CRL check within the Sensor?
Carbon Black Cloud: How To Configure Sensor Not To Require CRL Checks On Install
Carbon Black Cloud: Sensor Communication Blocked By CRL Checks And Cannot Reinstall Sensor
Carbon Black Cloud: How to Perform an Unattended Installation of the Windows Sensor