Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to Install a Different Server Version

EDR: How to Install a Different Server Version

Environment

  • EDR (formerly CB Response): 4.x and Higher

 


Objective

Install a version of EDR other than the most recent release.


Resolution

  1. Get repo version URLs currently available Modify /etc/yum.repos.d/CarbonBlack.repo with the desired baseurl from above:
    •  curl --key /etc/cb/certs/carbonblack-alliance-client.key --cert /etc/cb/certs/carbonblack-alliance-client.crt "https://yum.distro.carbonblack.io/enterprise/" | grep href | cut -d '"' -f 2 | cut -d '/' -f 1
    • baseurl=https://yum.distro.carbonblack.io/enterprise/<version>/$releasever/$basearch
  2. Clear yum cache:
    • yum clean all
  3. Stop services
    • Standalone:
      service cb-enterprise stop
      
      Cluster:
      /usr/share/cb/cbcluster stop

       
  4. Update cb-enterprise
    • yum update cb-enterprise

Additional Notes

  • Complete these steps across all nodes if a clustered environment. All nodes (Master and Minions) should be on the same version
  • To update to the latest version, the URL must be updated to the stable branch available in the latest release notes


Labels (1)
Tags (2)
Was this article helpful? Yes No
50% helpful (1/2)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
881
Contributors