Enable or Disable Live Response through cb.conf

For Carbon Black EDR servers, you can edit the cb.conf file to fix the state of Live Response so that it cannot be enabled or disabled through the console. This option is not available in Carbon Black Hosted EDR.

Procedure

1. On the Carbon Black EDR server, open /etc/cb/cb.conf for editing.
2. Add or uncomment the following setting in the cb.conf file and set its value:

   CbLREnabled=True
   -or-
   CbLREnabled=False

3. Save the cb.conf file.
4. You must stop and restart the standalone server or cluster to make the new setting effective:
   • For a standalone server:

     sudo service cb-enterprise restart

   • For clusters:

     sudo cbcluster stop

     (...wait for all the nodes to shut down, and then...)

     sudo cbcluster start

   For more information about cb.conf, see the Carbon Black EDR Server Configuration Guide.