VirtualBox

Opened 22 months ago

#21324 new defect

Carbon Black EDR: VirtualBox VMs Fail to Start After Windows Sensor Upgrades to 7.3.0

Reported by: neglas Owned by:
Component: other Version: VirtualBox-7.0.4
Keywords: Cc:
Guest type: all Host type: Windows

Description

https://community.carbonblack.com/t5/Knowledge-Base/EDR-VirtualBox-VMs-Fail-to-Start-After-Windows-Sensor-Upgrades/ta-p/113625

Environment EDR Windows Sensor: 7.3.0 Virtual Box: 6.1.34

Symptoms VirtualBox VMs do not start if the Windows host is running EDR win-7.3.0.

Cause VirtualBox hardening script may have issues with the updated, secure signed certificate on the CB win-7.3.0 cbedramsi.dll file.

Resolution Until VirtualBox hardening script permits the new signed certificate, the Windows host should stay on EDR win-7.2.2. VMs within VMware Workstation or Microsoft HyperV start properly when the Windows host is running EDR win-7.3.0.

Additional Notes CB win-7.3.0 uses a new more secure certificate; SHA2 384bit Sectigo CA with integrity checks. If a case is opened with Virtual Box, VMware Carbon Black Support and Engineers could provide additional information.

Attachments (2)

2022-12-05_14-59-36.png (10.0 KB ) - added by neglas 22 months ago.
Error message when starting VM
TEST-2022-12-05-14-45-11.zip (32.8 KB ) - added by neglas 22 months ago.
Log from virtualbox

Download all attachments as: .zip

Change History (2)

by neglas, 22 months ago

Attachment: 2022-12-05_14-59-36.png added

Error message when starting VM

by neglas, 22 months ago

Log from virtualbox

Note: See TracTickets for help on using tickets.

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy