| VMware Carbon Black Cloud 3.7.1.17 | 14 DEC 2022 | Build 3.7.1.17 Check for additions and updates to these release notes. |
What's New
The Carbon Black Cloud macOS Sensor version 3.7.1.17 is a build release. This release exclusively includes a new Carbon Black certificate with no other code changes.
Important notes
-
This release supports macOS 10.15 - 12.4. Please refer to the macOS support link under Resources for more details.
-
Additional notes can be found in Release Notes 3.7.1.12 under Resources.
-
Sensor version 3.8.0 and future sensor versions no longer support Kernel Extension approval as well as macOS11 and prior Operating Systems. Customers must use System Extension approval.
Resources
Release checksums
| 3.7.1.17 DMG SHA256 Checksum |
9b4730170afebab96c39a47f523d2d2c3ca024ae0259716ee012ed4c719ba0a7 |
| 3.7.1.17 PKG SHA256 Checksum |
e8e3ae37fc2713fd2991b0f889aac7a37f13899a597877257bd8f4f84bc18a56 |
Renewed certification
This sensor version addresses the expiring certificate from Apple on January 9, 2023 and is part of the low-risk certification renewal solution.
We highly recommend customers using version 3.7.1.12 to adopt version 3.7.1.17 by January 9, 2023 to avoid functionality regressions caused by expired certificates. Sensor version 3.7.1.12 will continue to work, but features that rely on an internal certificate check will fail. Since there are no code changes, there are no new sensor behaviors from 3.7.1.12.
Version 3.7.1.12 will be unavailable for download in the Carbon Black Cloud Console as of January 9, 2023 because of it’s expired certification.
For more information around the updated certification, please refer to this UEX post.
Known Issues
-
Extraneous Kernel Extension approval
If a Kernel Extension sensor is installed in macOS Catalina, and an OS upgrade to Big Sur occurs, users might see an extraneous Kernel Extension approval pop-up, despite the Kernel Extension already being approved.
Users can safely re-approve the Kernel Extension or safely ignore the pop-up. Users should re-approve Kernel Extension upon any future sensor upgrades.
-
Apple Silicon chip set
3.6.1.10 was the first GA version supporting the Apple Silicon chipset. Sensor downgrade to 3.5.x versions prior to 3.6.1.10 is therefore not officially supported on Apple Silicon machines. Doing so would bring the sensor to a version that does not officially support Apple Silicon, causing the sensor to run in emulation mode.
Note that downgrade behavior/expectations on Intel machines does not change.
We are aware that some customers are utilizing the 3.5.x versions for emulated support of the sensor on Apple Silicon chip sets.
The recommended downgrade path from Apple Silicon native sensors (any 3.6.x+ sensor) to any Apple Silicon pre-native sensor (any sensor prior to 3.6.x) is via uninstall of the native sensor and installation of the pre-native emulated version.
Utilizing standard downgrade behaviors is unsupported and can lead to undefined behavior.
-
Migrating data from Intel to an Apple Silicon machine
Including the sensor as part of migrating data from Intel to an Apple Silicon machine (i.e. Migration Assistant) is not a supported workflow. The recommended workflow is to uninstall the sensor before migration or exclude the sensor during migration and install it on the target machine.
