Install Carbon Black Cloud Sensor for Linux

To have the Carbon Black sensor on your Linux VM workload communicating with the Carbon Black Cloud through a Sensor Gateway, you must install and configure the sensor to work with the Sensor Gateway.

Prerequisites

• Verify that you have access to the latest Carbon Black sensor for Linux version (2.15+).
• For information on using the Carbon Black Cloud console to install sensors on VM workloads, see VMware Carbon Black Cloud Sensor Installation Guide. If you install the sensor through the console UI, include the UseSystemCerts=true property in the /var/opt/carbonblack/psc/cfg.ini file. For details, see Installing Linux Sensors on Endpoints.
• Ensure that you have the company code available. For more information, see Generate a Company Code.

Procedure

1. Download the latest version of the Carbon Black sensor for Linux.
2. Omit if the Sensor Gateway is already configured with CA-signed certificate. To use a self-signed certificate in the Sensor Gateway, you must add the certificate chain into the trust store.
   1. Copy the certificate sgw_certificate.pem file, which you intend to use for communication with the Sensor Gateway, into a known location on your Linux VM workload.
   2. Add the content of the self-signed certificate sgw_certificate.pem into the CA signed certificate ca-certificates.crt file on your VM workload.

      cat sgw_certificate.pem >> CERTFILE_PATH 

      The CERTFILE_PATH points to /etc/ssl/certs/ca-certificates.crt on most Linux systems. However, you must confirm in the documentation of your distro to select the Trusted CA certs file.

3. Retrieve the sensor installation file by running the command:

   wget <location of the sensor installation file>

4. Unzip the sensor installation file:

   tar -xvf <tgz installation file>

5. Use the company code you previously generated to complete the sensor installation.

   ./install.sh "<company_code>" --sensor-gateway-cert CERTFILE_PATH

   The CERTFILE_PATH points to /etc/ssl/certs/ca-certificates.crt on most Linux systems. However, we recommend you confirm in the documentation of your distro to select the Trusted CA certs file.

Results

Once your sensor is successfully installed, you can see the running Sensor Gateway in the Carbon Black Cloud console.

What to do next

If needed, you can uninstall the sensor from your Linux workload by running the command:

dpkg --purge cb-psc-sensor