Assign Different Certificates to Different Sensor Groups

Perform the following procedure to assign a certificate to one sensor group.

Your organization might consist of multiple sites or groups whose endpoints are mapped to different sensor groups. You can use different server certificates to authenticate the connections between the Carbon Black EDR server and different sensor groups, thereby reducing the exposure to a compromised server certificate. This lets you manage certificate expiration on a per sensor group basis.

You can also use the per-sensor-group assignment of certificates to gradually change a certificate, even if you want to use the same certificate for all sensors. After you see successful server-sensor communications for one group, you can assign the certificate to all sensors or continue assigning the new certificate on a per sensor group basis.

Procedure

1. In the navigation bar, click Sensors.
2. In the left panel, click the name of the sensor group whose certificate you want to change. Click the Edit button.
3. In the General panel of the Edit Group page, click the Assign Server Certificate drop-down menu to choose the certificate to use for this group.
   
4. Click the Save Group button at the bottom of the page.