Client registration codes are used when you register agents with the server during installation. They prevent other programs from impersonating Carbon Black App Control agents.

You can generate client registration codes, and enable and disable them.

If they are enabled, you must provide the client registration code when you install a new agent that supports this feature or after installation by using the command line interface. Existing agents that have already connected to the server will remain connected, and will not need the registration code.

This feature may not be visible in the console until a version of the agent that supports registration codes is installed.

Note: This feature is only available with Windows Agent 8.9.2 or later.

Procedure

  1. On the console menu, click the Settings (gear) icon, and click System Configuration.
  2. Click the Security tab, and scroll to the Client Registration Code section.
  3. To enable the usage of client registration codes:
    1. Click Edit, and select Enabled in the Require Clients to Provide Registration Code During Install field.
    2. Click Update, and click Yes in the Confirmation page to confirm the server setting change.

      The Client Registration Code showing the Require Clients to Provide Registration Code During Install field as enabled.

  4. To generate a new code, click Generate New Code and, in the Confirmation page, click Yes to confirm the server setting change.

    The current registration code is displayed with a timestamp of the generated date.

    The Client Registration Code showing the current registration code with a timestamp of the generated date.

  5. To copy the current registration code, click Copy Code.
  6. To enable or disable a registration code, in the Registration Code Archive table, use the toggle settings in the Enabled column for the relevant code.

    The Client Registration Code Archive table.

What to do next

Using the Client Registration Code
Note: The following commands apply to Windows agents only. In later releases of the Linux and Mac agents when client registration codes are supported, corresponding information will be provided. The 8.10.0 server will support the feature for agents of all operating systems.

Use the client registration code as follows, depending on your installation setup:

  • To install an agent using the registration code, use the following command line:
    msiexec.exe /i policyname.msi B9_REGISTRATION_CODE=registrationcodegoeshere
  • To connect an agent with the server after running the installer without the registration code, use the following command line:
    dascli.exe register code registrationcodegoeshere