Setting up Global VDI Support on Linux

This topic describes how to set up global VDI support on Linux.

Procedure

1. Install the Linux sensor.
2. Stop cbdaemon: systemctlstop cbdaemon
3. Remove any stored binary or event data:

   rm-rf /var/opt/carbonblack/response/store/*
   rm-rf /var/opt/carbonblack/response/eventlogs/*

4. Enable VDI in config.ini:

   vim /var/opt/carbonblack/response/sensorsetting.ini 
   VdiEnabled=1

5. Set the Sensor ID to 0. This allows the Carbon Black EDR to assign new Sensor IDs to new VMs.

   vim /var/opt/carbonblack/response/config.ini 
   SensorId=0
   SensorIdforDisplay=0

6. Start the cbdaemon in the primary image VM:

   systemctl start cbdaemon