Installing Carbon Black Sensors with VMware Workspace ONE UEM
In my previous blogs, I discussed how to install the Carbon Black sensor in a non-persistent VDI environment and securing our virtual infrastructure. Now it’s time to focus on physical devices such as corporate laptops and desktops, as well as BYOD policies within companies. In this blog post, we will explore how to install the Carbon Black sensor on mobile devices managed by VMware Workspace ONE UEM.
Preparation
Before we begin, make sure you have access to VMware Workspace ONE UEM and have downloaded the Carbon Black MSI installer from the Carbon Black Cloud management page.
Step 1: Installing the Sensor
Log in to the Workspace ONE UEM management page, go to APPS & BOOKS > Native, and click on the Add button. Select the Application File option, and then upload the Carbon Black MSI installer. Once the upload is complete, leave the Supported Processor Architecture set at 32-bit since we are installing the sensor on Windows 10 64-bit devices.
Step 2: Deployment Options
In the Deployment Options tab, we need to adjust a few settings to ensure correct installation of the sensor. We need to add the COMPANY_CODE parameter to the command line, which should look like this:
msiexec /i “installer_vista_win7_win8-64-3.6.0.1979.msi” /qn COMPANY_CODE=”7PRI————#E8″
After entering the correct command line, click Save & Assign to continue.
Step 3: Assignment Group
Create a Windows 10 assignment group to deploy applications to Windows 10 devices. For the App Delivery Method, select Auto to force the application to be installed automatically. Also, disable Notifications, allow user install deferral, and the application will not be shown in the App Catalog. You can set these options as you like; click Save to continue.
Step 4: Publish the App
Click Publish to finish creating the native app in Workspace ONE UEM. Now that we are ready, the application will immediately be pushed to all devices in the assignment group. Since we disabled all notifications and visibility in the App Catalog, the Carbon Black sensor is silently installed on the device.
Verifying Installation
There are a couple of ways to check if the installation was successful and the sensor is up and running:
1. Open the task manager on the device, and check if the Carbon Black processes are running.
2. You can also check the Workspace ONE UEM console. Click Devices > Select a device, and click on the Apps tab.
3. And of course, you can check if the device is shown on the Carbon Black Cloud management page. Open the management page and go to Inventory > Endpoints (in this example, I used a virtual “laptop,” so I’m checking the VM Workloads page).
As we have seen, installing the Carbon Black sensor through VMware Workspace ONE UEM is straightforward and easy. The ease of deploying the sensors in all various ways makes Carbon Black a joy to use. If you are interested in a demo, feel free to contact me or keep an eye out for more on Carbon Black and Workspace ONE Intelligence!
Hi, my name is Age Roskam, and I work as a Consultant at ITQ. Over the last decade, I’ve gained a lot of knowledge and experience in End User Computing and Cyber Security. Since 2018, I’ve been awarded the VMware vExpert status every year. In 2020, I received the honor to be part of the first vExpert EUC subprogram, and in addition to that, I’m part of the vExpert Security subprogram since 2021. When I’m offline, I enjoy family, sports, and grilling on my BBQs.