Enable CAPI 2 Logging

[#1]

Environment

• Carbon Black Protection
• Carbon Black Response

Objective

Enabling CAPI 2 Windows Logging

Resolution

1. Open the computer management console by entering in the Start->Run box:  compmgmt.msc /s
2. From the console object tree (left side) expand Event Viewer -> Windows Logs -> Applications and Services Logs -> Microsoft -> Windows -> CAPI2 select Operational.
3. Select an event of interest and on the bottom half find the 'General' and 'Details' tab.
4. Select the 'Details' tab and select the 'XML view' radio button to view the XML document (see CAPI2 Details example below)
5. Look for either the 'ErrorStatus'
6. Certificate Error Codes

Related Content

Troubleshooting Certificate issues on files in Carbon Black Protection: https://community.bit9.com/docs/DOC-1350

Agents disconnected when using CA certificate Cb Protection: Agents disconnected when using CA certificate