DigiCert, the certificate authority used by Carbon Black Cloud (CBC) Sensors, has announced that they will stop trusting the older Generation 1 (G1) certificates. CBC Linux Sensors lower than version 2.15.0 (not inclusive) use these certificates and thus will be unable to communicate to the CBC backend once the certificates are revoked. This is an industry-wide change and not limited to Carbon Black products. We will be updating the Carbon Black service to Generation 2 (G2) certificates on March 31st, 2026. 

Action: Upgrade to the latest CBC Linux Sensors as soon as possible. Minimum sensor version of 2.15.0 is required to be able to communicate with the backend. However, the recommendation is to upgrade to the latest sensor version 2.16.2.

Note that as per CBC Linux sensor support policy, all sensors except 2.16.x are out of support. 

What will happen on March 31st?

CBC Linux Sensors lower than 2.15.0 will not be able to communicate with the CBC backend. Impacts: 

• These endpoints will not receive any new updates from the CBC backend, including policy updates and file reputation updates
• Limited functionality such as scanning based on local hashes will continue to work
• The sensors will not be able to send their status or logs to the CBC backend, resulting in a loss of EDR functionality
• The endpoint will continue to be visible in the console but will go to “inactive” state after 30 days

What should I do?

Upgrade to newer sensors (2.16.2 recommended) as soon as possible. 

Note that if 2.14.x sensors are upgraded to 2.16.x via the console, they need to be upgraded to 2.15.x first. Sensor kits for 2.15.2 have been made available on the console to help with this transition.