| VMware Carbon Black Cloud 3.7.2.81 | 14 DEC 2022 | Build 3.7.2.81 Check for additions and updates to these release notes. |
What's New
The Carbon Black Cloud macOS Sensor version 3.7.2.81 is a build release. This release exclusively includes a new Carbon Black certificate with no code changes from the 3.7.2.77 build.
Important notes:
-
This release supports macOS 11 - 14. Please refer to the macOS support link under Resources for more details.
-
This release no longer supports macOS 10.15
-
Additional notes can be found in Release Notes 3.7.2.77 under Resources.
-
Sensor version 3.8.0 and future sensor versions no longer support Kernel Extension approval as well as macOS11 and prior Operating Systems. Customers must use System Extension approval.
Resources:
Release checksums
| 3.7.2.81 DMG SHA256 Checksum |
967900cd4ad9fa8ec1f04564cfa7e6029f0e9b57378dc065c2398533db7e4092 |
| 3.7.2.81 PKG SHA256 Checksum |
dc8357b7038bb5b1d26e0b71a2b243d1300af368e99e889db05651506f50b1cb |
Renewed certification
This sensor version addresses the expiring certificate from Apple on January 9, 2023 and is part of the low-risk certification renewal solution.
We highly recommend customers using version 3.7.2.77 to adopt version 3.7.2.81 by January 9, 2023 to avoid functionality regressions caused by expired certificates. Sensor version 3.7.2.77 will continue to work, but features that rely on an internal certificate check will fail. Since there are no code changes, there are no new sensor behaviors from 3.7.2.77.
Version 3.7.2.77 will be unavailable for download in the Carbon Black Cloud Console as of January 9, 2023 because of it’s expired certification.
For more information around the updated certification, please refer to this UEX post.
Known Issues
The following issues are known to affect the software. Each lists the sensor version when the issue was first reported. Issues are removed after they are resolved.
-
Extraneous Kernel Extension approval
If a Kernel Extension sensor is installed in macOS Catalina, and an OS upgrade to Big Sur occurs, users might see an extraneous Kernel Extension approval pop-up, despite the Kernel Extension already approved.
Users can safely re-approve the Kernel Extension or safely ignore the pop-up. Users should re-approve Kernel Extension upon any future sensor upgrades.
-
Apple Silicon chip set
3.6.1.10 was the first GA version supporting the Apple Silicon chipset. Sensor downgrade to 3.5.x versions prior to 3.6.1.10 is therefore not officially supported on Apple Silicon machines. Doing so would bring the sensor to a version that does not officially support Apple Silicon, causing the sensor to run in emulation mode.
Note that downgrade behavior/expectations on Intel machines does not change.
We are aware that some customers are utilizing the 3.5.x versions for emulated support of the sensor on Apple Silicon chip sets.
The recommended downgrade path from Apple Silicon native sensors (any 3.6.x+ sensor) to any Apple Silicon pre-native sensor (any sensor prior to 3.6.x) is via uninstall of the native sensor and installation of the pre-native emulated version.
Utilizing standard downgrade behaviors is unsupported and can lead to undefined behavior.
-
Migrating data from Intel to an Apple Silicon machine
Including the sensor as part of migrating data from Intel to an Apple Silicon machine (i.e. Migration Assistant) is not a supported workflow. The recommended workflow is to uninstall the sensor before migration or exclude the sensor during migration and install it on the target machine.
-
Running command line uninstall utility from within a Carbon Black directory causes crash after successfully uninstalling the sensor
Run the uninstall command from a user-owned directory to fix the issue.
-
Proxy credentials need to be resupplied if downgrading from 3.7.2 or newer
If downgrading from 3.7.2 (or newer) to 3.7.1 (or older) and using proxy credentials to communicate with the CBC backend, any existing proxy credentials will not persist to the downgraded sensor and will need to be resupplied.
Resupply proxy credentials using the -p and -x options when downgrading using the unattended installation script. Alternatively, use MacOS System Preferences to configure proxy and credentials.
