Endpoint Standard: Can the CRL Check be Re-Enabled After the Sensor is Installed?

[#1]

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.3.x.x and higher
• Microsoft Windows: All supported versions

Question

Is it possible to re-enable the CRL check after installing the sensor? 

Answer

1. Put the sensor into bypass
2. Edit cfg.ini
3. Add the line CurlCrlCheck=true
4. Take the sensor out of bypass
5. Run "c:\program files\confer\repcli" updateconfig

Additional Notes

• To re-enable the CRL check without repcli, it will require an uninstall/install of the sensor

Related Content

Carbon Black Cloud: How To Configure Sensor Not To Require CRL Checks
Carbon Black Cloud: Does Disabling the CRL Check on Sensors Open Communications to Man in the Middle...
CB Defense: Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?
Carbon Black Cloud: Where is the cfg.ini file located for Windows Sensor?
Carbon Black Cloud: How to Toggle Sensor Bypass with the RepCLI Utility (Windows)