Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black sensor failed to register

Carbon Black sensor failed to register

Version
All Cb Response Sensor


Issue

Sensors are not connecting to the server. They are getting an error:

failed to register [hr=0x80190190] [Code=400]

Symptoms

/var/log/cb/nginx/error.log:

2016/03/17 11:09:30 [crit] 9429#0: *2836311 SSL_do_handshake() failed (SSL: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib) while SSL handshaking, client: ::ffff:10.132.86.203, server: [::]:443

2016/03/17 11:09:30 [alert] 9431#0: *2836303 ignoring stale global SSL error (SSL: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib) while waiting for request, client: ::ffff:10.121.219.30, server: [::]:443


Cause
The sensor is unable to communicate with the server because its certificate has been revoked on the server side.  This sensor is trying to use the revoked certificate. Cbdiag will show the cert for the Default Group is revoked.

Solution

Any sensors that are in this state will need to be reinstalled, in order to establish communication with the server.

Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎06-27-2016
Views:
1915