Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Endpoint Standard: How to Configure SCCM to Allow Sensor Upgrades

Endpoint Standard: How to Configure SCCM to Allow Sensor Upgrades

Environment

  • Endpoint Standard (formerly CB defense): All Versions
  • Microsoft Windows: All Supported Versions
  • SCCM deployment

Objective

  • Configure SCCM to allow future sensor upgrades from other deployment methods (Unattended, Attended, or Cb Defense Web Console Upgrade)

Resolution

  1. Open SCCM Configuration Manager
  2. Go to the Software Library
  3. Select Overview > Application Management > Applications > Carbon Black
  4. Select the Deployment Type tab
  5. Select the Deployment Type you have configured for Cb Defense
  6. Select the Detection Method tab.
  7. Select the Detection rule configured.
  8. Select Edit Clause
  9. Change the Setting Type to File System, Path to %ProgramFiles%\Confer, File or Folder name to RepUx.exe
  10. Select "The file system setting must satisfy the following rule to indicate the presence of this application"
  11. Configure MSI Property "Version", Operator "Greater than or equal to", and Version should be the currently install Cb Defense sensor version.
  12. Select OK to save changes to the Detection Rule
  13. Select OK to save changes to the Detection Method
  14. Select OK to save changes to the Deployment Type

Additional Notes

If SCCM Configuration Manager is configured with detection rule: "This MSI product code must exist on the target system to indicate the presence of this application." then this will result in the sensor being uninstalled after upgrade using some other deployment method

Related Content


Was this article helpful? Yes No
67% helpful (2/3)
Article Information
Author:
Creation Date:
‎12-27-2017
Views:
10885
Contributors