You can view the reason an asset goes into a bypass mode in the Carbon Black Cloud console.

The following table lists the possible reasons for an asset to go in a bypass mode, and the remediation actions that you can perform. You can use a search value associated with a bypass reason to filter assets matching the bypass reason.

Search value of the bypass reason Display value of the bypass reason Description Action to resolve bypass
sensorStates:"CSR_ACTION" Bypass (Admin action) The Carbon Black Cloud console instructs the sensor to go into a bypass mode.

Relates to sensors supporting Windows, macOS, and Linux.

 Use the Carbon Black Cloud console or a local action to remove the sensor from the bypass state.
sensorStates:"REPUX_ACTION" Bypass (Local action) A local action instructs the sensor to go into bypass mode. For example, enable bypass locally on the sensor:
  • By elevating a command prompt and executing the command "C:\Program Files\Confer\Uninstall.exe" /bypass 1 <UninstallCode>
  • By logging into the asset with credentials configured at sensor installation, launching a command prompt, and execuitng the command repcli bypass 1 from the directory C:\Program Files\Confer.
  • By using the policy setting "Allow user to disable protection". For details on this setting, see General Policy Settings in the user guide.
  • By executing the command for installing the sensor with the option bypass=1 in its syntax.

Relates to sensors supporting Windows and macOS.

 Use the Carbon Black Cloud console or a local action to remove the sensor from the bypass state.
  • sensorStates:"UNSUPPORTED_OS" OR
  • sensorStates:”OS_VERSION_MISMATCH”
 Error (Unsupported OS) The installed sensor does not support the operating system.

Relates to sensors supporting macOS and Linux.

 Upgrade the sensor or the operating system to a supported version. For information on the product operating environment requirements, see VMware Carbon Black Cloud on AWS GovCloud (US) Documentation.
  • sensorStates:"DRIVER_LOAD_NOT_GRANTED AND
  • sensorStates:"DRIVER_USERSPACE
 Error (System ext. not approved) The Carbon Black Cloud macOS sensor's System Extension is not approved.

Relates to sensors supporting macOS.

 Approve the System Extension that the sensor utilizes.See Approving the System Extension and Network Extension for macOS 11+ in the VMware Carbon Black Cloud on AWS GovCloud (US) Sensor Installation Guide.
  • sensorStates:"DRIVER_LOAD_NOT_GRANTED" AND
  • sensorStates:"DRIVER_KERNEL"
 Error (Kernel ext. not approved) The Carbon Black Cloud macOS sensor requires a Kernel Extension approval, regardless of the previous Kernel Extension approval status.

Relates to sensors supporting macOS.

 Approve the Kernel Extension. See Approve the Kernel Extension (macOS 10.13 – macOS 11) in the VMware Carbon Black Cloud on AWS GovCloud (US) Sensor Installation Guide.
sensorStates:"REMGR_INIT_ERROR" Error (Contact support) The sensor is having a problem connecting to the event_collector.

Relates to sensors supporting Linux.

Check that the Linux distribution is supported. For version compatibility, see VMware Carbon Black Cloud Linux Sensor Operating Environment Requirements.

If the distribution is supported, contact VMware Carbon Black Support.
sensorStates:"KERNEL_HEADERS_NOT_INSTALLED" Error (Missing kernel headers) The sensor's Extended Berkeley Packet Filter (eBPF) probe cannot load because the Linux kernel headers, matching the running kernel version, are not installed. Also, the sensor might be running an unsupported OS Kernel version.

Relates to sensors supporting Linux.

 Verify that the kernel headers are installed. See Linux Kernel Requirements for Linux Sensor Versions 2.10+ in the VMware Carbon Black Cloud on AWS GovCloud (US) Sensor Installation Guide.

For version compatibility, see VMware Carbon Black Cloud Linux Sensor Operating Environment Requirements.
sensorStates:”DRIVER_INIT_REBOOT_REQUIRED” Error (Reboot required) The asset requires a reboot to initialize the driver.

Relates to sensors supporting macOS.

 If a reboot does not resolve this, contact VMware Carbon Black Support.
sensorStates:” DRIVER_LOAD_PENDING” Error (Extension load pending) Loading extension is pending.

Relates to sensors supporting macOS.

 If a reboot does not resolve this, contact VMware Carbon Black Support.
sensorStates:"DRIVER_INIT_ERROR" Error (Extension Error) Driver fails in loading properly.

Relates to sensors supporting Windows, macOS, and Linux.

 If a reboot does not resolve this, contact VMware Carbon Black Support.
sensorStates:"SENSOR_UPGRADE_IN_PROGRESS" Error (Update in progress) The asset is going through a sensor update.

Relates to sensors supporting Windows.

 Resolves immediately after the sensor update completes.
N/A Bypass (Contact Support) Device is in bypass for an unknown reason. Contact VMware Carbon Black Support for additional assistance.