Perform the following procedure to install Yara Manager.
Procedure
- Install the CbOpenSource repository:
cd /etc/yum.repos.d curl -O https://opensource.carbonblack.com/release/x86_64/CbOpenSource.repo
- Use Yum to install Yara Manager:
yum install python-cb-yara-manager
- Copy the example config file:
cp /etc/cb/integrations/cb-yara-manager/config.py.example /etc/cb/integrations/cb-yara-manager/config.py
- Verify the config file.
- Create an authentication configuration file at /etc/cb/integrations/cb-yara-manager/auth.conf . Add the following lines to the file:
[auth] api_token=adequately_long_and_complex_password_or_token
- Replace adequately_long_and_complex_password_or_token with a passphrase or token.
- Start the Yara Manager.
- Add the configured API token and Yara Management support to cb.conf :
YaraManagerEnabled=true YaraManagerToken=adequately_long_and_complex_password
For information about cb.conf, see the VMware Carbon Black EDR Server Configuration Guide. - Restart cb-coreservices to apply the changes:
/usr/share/cb/cbservice cb-coreservices restart
- Log in to your Carbon Black EDR console and browse to https://<cb_server_url>/connectors/yara, or click Yara Manager on the navigation bar.