Summary
VMware Carbon Black EDR Windows Sensor v6.1.13 provides corrective content to previous
6.1.x Windows sensors. This sensor release also includes all changes and fixes from previous
releases.
This document provides information for users upgrading to VMware Carbon Black EDR
Windows Sensor v6.1.13 from previous versions as well as users new to Cb Response. The key
information specific to this release is provided in the following major sections:
● Installation Instructions - Provides instructions for VMware Carbon Black EDR
Windows sensor installation.
● Corrective content – Describes issues resolved by this release as well as more general
improvements in performance or behavior.
● Known issues and limitations – Describes known issues or anomalies in this version
that you should be aware of.
Server compatibility
VMware Carbon Black EDR sensors included with server releases are compatible with all server
releases going forward. It is always recommended to use the latest server release with our
latest sensors to utilize the full feature capabilities of our product, however, using earlier 6.x
server versions with the latest sensor should not impact core product functionality.
Sensor operating systems
VMware Carbon Black EDR sensors interoperate with multiple operating systems. For the most
up-to-date list of supported operating systems for VMware Carbon Black EDR sensors (and all
VMware Carbon Black products), refer to the following location in the VMware Carbon Black
User eXchange: https://community.carbonblack.com/docs/DOC-7991
Documentation
This document supplements other VMware Carbon Black documentation. Click here to search
the full library of VMware Carbon Black EDR user documentation.
Technical support
VMware Carbon Black EDR server and sensor update releases are covered under the
Customer Maintenance Agreement. Technical Support is available to assist with any issues that
might develop during the installation or upgrade process. Our Professional Services
organization is also available to assist to ensure a smooth and efficient upgrade or installation.
Copyright © 1998 - 2021 VMware, Inc. All rights reserved. This product is protected by copyright and intellectual property laws
in the United States and other countries as well as by international treaties. VMware products are covered by one or more
patents listed at http://www.vmware.com/go/patents.
VMware is a registered trademark or trademark of VMware, Inc. in the United States and other jurisdictions. Microsoft is a
registered trademark of Microsoft Corporation in the United States and other countries. All other marks and names
mentioned herein may be trademarks of their respective companies.
VMware Carbon Black | 1100 Winter Street, Waltham, MA 02451 USA | Tel: 617.393.7400
Note: Before performing an upgrade, Carbon Black recommends reviewing content on the User
eXchange for the latest information that supplements the information contained in this
document.
Installation Instructions
To install the sensors on to your server, run through the following instructions:
1. Ensure your VMW CB EDR YUM repo is set appropriately:
a. The VMW CB EDR repository file to modify is /etc/yum.repos.d/CarbonBlack.repo
b. Baseurl =
https://yum.distro.carbonblack.io/enterprise/stable/$releasever/$basearch/
2. On the VMW CB EDR server, clear the YUM cache by running the following command:
a. yum clean all
3. After the YUM cache has been cleared, download the sensor install package by running
the following command:
a. Run yum install --downloadonly --downloaddir=<package local download
directory> <package>
i. Note: The <package local download directory> is a directory of your
choice
ii. Note: <package> is replaced by cb-sensor-6.1.13.15392-win
4. Install the new sensor package on the VMW CB EDR server by running the command:
a. rpm -i --force <package>
5. Make the new installation package available in the server console UI by running the
command:
a. /usr/share/cb/cbcheck sensor-builds --update
i. Note: If your groups have Automatic Update enabled, the sensors in that
group will start to automatically update.
Your new sensor versions should now be available via the console. For any issues, please
contact Carbon Black Technical Support.
Important Note: Installations and upgrades (as well as uninstallations and downgrades) of the
sensor on Windows XP and Windows Server 2003 will require a reboot in order to properly
load (or unload) our software drivers.
VMware Carbon Black EDR Windows Sensor 6.1.13 Release Notes 2
For all other Windows OS, it is always encouraged to conduct a reboot of the endpoint after
installation (or restart) of our sensor to ensure the sensor properly captures the full historical
data of all running processes and associated information.
Corrective Content
This release provides the following corrective content changes:
● .MSI installer will no longer use the C:\Windows\Temp folder. [CB-33714]
● Updated OpenSSL library to version 1.1.1k. [CB-34930]
● Fixed a bug with Isolated sensors losing communication with EDR Server. [CB-35466]
● 6.1.13+ EDR Windows sensor installers will not install on non-SHA2 patched Windows
operating systems. Please see our User Exchange post for more information on our
SHA2 requirement. [CB-35584]
● Updating publisher signing information from Carbon Black to VMware. [CB-36448]
● Updated Curl library to version 7.8. [CB-36812]
Known Issues and Limitations
Known issues associated with this version of the sensor are included below:
● CB-32324: Disabling DNS Name Resolution For NetConn Events: Versions of the
sensor prior to 7.1.1 (and 6.1.12 for XP/Server2003) were susceptible to high CPU
utilization in the IP Address-to-Hostname resolution functionality of the sensor. This
issue has been addressed, however, this registry key will still disable IP address name
resolution for customers who wish to do so. [CB-17552]:
[HKEY_LOCAL_MACHINE\SOFTWARE\CarbonBlack\config]
"DisableNetConnNameResolution"=dword:00000001
Contacting Support
Use one of the following channels to request support or ask support questions:
● Web: User eXchange
● Phone: 877.248.9098
Reporting Problems
When contacting Carbon Black Technical Support, be sure to provide the following required
information about your question or issue:
VMware Carbon Black EDR Windows Sensor 6.1.13 Release Notes 3
● Contact: Your name, company name, telephone number, and email address
● Product version: Product name (Carbon Black EDR server and sensor version)
● Hardware configuration: Hardware configuration of the Carbon Black EDR server
(processor, memory, and RAM)
● Document version: For documentation issues, specify the version and/or date of the
manual or document you are using
● Problem: Action causing the problem, error message returned, and event log output (as
appropriate)
● Problem severity: Critical, serious, minor, or enhancement request
VMware Carbon Black EDR Windows Sensor 6.1.13 Release Notes 4
