Opened 22 months ago
#21324 new defect
Carbon Black EDR: VirtualBox VMs Fail to Start After Windows Sensor Upgrades to 7.3.0
| Reported by: | neglas | Owned by: | |
|---|---|---|---|
| Component: | other | Version: | VirtualBox-7.0.4 |
| Keywords: | Cc: | ||
| Guest type: | all | Host type: | Windows |
Description
Environment EDR Windows Sensor: 7.3.0 Virtual Box: 6.1.34
Symptoms VirtualBox VMs do not start if the Windows host is running EDR win-7.3.0.
Cause VirtualBox hardening script may have issues with the updated, secure signed certificate on the CB win-7.3.0 cbedramsi.dll file.
Resolution Until VirtualBox hardening script permits the new signed certificate, the Windows host should stay on EDR win-7.2.2. VMs within VMware Workstation or Microsoft HyperV start properly when the Windows host is running EDR win-7.3.0.
Additional Notes CB win-7.3.0 uses a new more secure certificate; SHA2 384bit Sectigo CA with integrity checks. If a case is opened with Virtual Box, VMware Carbon Black Support and Engineers could provide additional information.


Error message when starting VM