Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Enable CAPI 2 Logging

Enable CAPI 2 Logging

Environment

  • Carbon Black Protection
  • Carbon Black Response

Objective

Enabling CAPI 2 Windows Logging

Resolution

  1. Open the computer management console by entering in the Start->Run box:  compmgmt.msc /s
  2. From the console object tree (left side) expand Event Viewer -> Windows Logs -> Applications and Services Logs -> Microsoft -> Windows -> CAPI2 select Operational.
  3. Select an event of interest and on the bottom half find the 'General' and 'Details' tab.
  4. Select the 'Details' tab and select the 'XML view' radio button to view the XML document (see CAPI2 Details example below)
  5. Look for either the 'ErrorStatus'
  6. Certificate Error Codes

Related Content

Troubleshooting Certificate issues on files in Carbon Black Protection: https://community.bit9.com/docs/DOC-1350

Agents disconnected when using CA certificate Cb Protection: Agents disconnected when using CA certificate

Labels (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-21-2015
Views:
716
Contributors