Access official resources from Carbon Black experts
# Added <date> NewRegistrationCallbackModulePath=/usr/share/cb/plugins/default_new_sensor_registration_callback.py NewRegistrationCallbackClassName=DefaultNewRegistrationCallback VDIAPIEnabled=True1b. Adding the line below overrides the variables in 1a, and instructs EDR that VDI is controlled and configurable by the console. If EDR is a cluster, add the line to each EDR server.
# Added <date> VDIAPIEnabled=True
Standalone Server: service cb-enterprise restart Cluster: /usr/share/cb/cbcluster stop /usr/share/cb/cbcluster start
Windows: sc stop carbonblack sc stop carbonblackk regedit - Modify HKLM/software/carbonblack/config/SensorId to 0 del c:\windows\carbonblack\eventlogs\* del c:\windows\carbonblack\store\MD5_*
Linux: systemctl stop cbdaemon vim /var/opt/carbonblack/response/sensorsetting.ini VdiEnabled=1 vim /var/opt/carbonblack/response/config.ini SensorId=0 SensorIdforDisplay=0 rm -rf /var/opt/carbonblack/response/store/* rm -rf /var/opt/carbonblack/response/eventlogs/*
OSX: launchctl unload /Library/LaunchDaemons/com.carbonblack.daemon.plist vi /var/lib/cb/sensor.id (Replace current id with 0)
To set up group-based VDI support: 1 Login to the Carbon Black EDR console. 2 To configure a group for VDI support, click Sensors on the navigation bar. 3 From the Sensors menu, select the sensor group to configure for VDI support. 4 Click the Edit Settings tab. The Edit Settings page appears. 5 On the Advanced tab, select the VDI Behavior Enabled checkbox. 6 Click the Save Changes button to enable the configuration.