Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: VirtualBox VMs Fail to Start After Windows Sensor Upgrades to 7.3.0

EDR: VirtualBox VMs Fail to Start After Windows Sensor Upgrades to 7.3.0

Environment

  • EDR Windows Sensor:  7.3.0
  • Virtual Box: 6.1.34

Symptoms

VirtualBox VMs do not start if the Windows host is running EDR win-7.3.0.

Cause

VirtualBox hardening script may have issues with the updated, secure signed certificate on the CB win-7.3.0 cbedramsi.dll file.

Resolution

  • Until VirtualBox hardening script permits the new signed certificate, the Windows host should stay on EDR win-7.2.2.
  • VMs within VMware Workstation or Microsoft HyperV start properly when the Windows host is running EDR win-7.3.0.

Additional Notes

  • CB win-7.3.0 uses a new more secure certificate; SHA2 384bit Sectigo CA with integrity checks.
  • If a case is opened with Virtual Box, VMware Carbon Black Support and Engineers could provide additional information.  
     

Related Content


Labels (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎07-06-2022
Views:
1418
Contributors