Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Cb Defense: Controlled Uninstall Doesn't Work With 3.1 Mac Sensor

Cb Defense: Controlled Uninstall Doesn't Work With 3.1 Mac Sensor

Environment

  • Cb defense Web Console: January '18 release and later
  • Cb Defense Sensor: 3.1.x
  • Mac OS: All Supported Versions

Symptoms

  • Update device to Mac OS 3.1 Sensor
  • Within Desired policy enable Controlled Uninstall feature by selecting "Require Code to Uninstall Sensor" option and saving policy
  • Controlled Uninstall feature is not successfully enabled upon the sensor side and is still able to be uninstalled without prompting for Company Deregistration Code

Cause

  • Upon first policy edit, the setting is not being applied/saved successfully; This is a known issue in the 3.1 Mac OS Sensor.

Resolution

  • This issue will be fixed in a future version of Cb Defense Sensor for Mac; This article will be updated accordingly once the fix is implemented.
  • As a temporary workaround, Please perform the following to make the setting apply:
    • Uncheck the "Require Code to Uninstall Sensor" option
    • Save policy
    • Check the "Require Code to Uninstall Sensor" option
    • Save policy
  • Wait for sensor to check in at least twice before retesting the controlled uninstall.

Additional Notes

The controlled uninstall was first introduced with January '18 Release and Windows sensor 3.1. It is now also available for Mac endpoints starting with Mac sensor 3.1​.

Related Content

MacOS CbD Sensor 3.1 Release Notes

Cb Defense User Guide (Chapter 4: Deploy and manage sensors Pg. 43 Uninstall Sensors)

Rolling Out the January ‘18 Release of Cb Defense

Cb Defense January 2018 Release Notes

Cb Defense: How to Perform an Attended Installation of the Sensor

Cb Defense: How to Perform an Unattended Installation of the Mac Sensor​

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-20-2018
Views:
1045
Contributors