What's New in this Release?

You can use this information to quickly review new features of the Carbon Black App Control Server.

Updates to this user guide are grouped together by version. For each new or changed feature, a brief description is provided in addition to a link to the respective topic.

App Control Server 8.11.2

Please see the 8.11.2 Release Notes for details.

This is a summary of the 8.11.2 changes:

  • New Per-policy SHA1 Installers: The server can now generate per-policy SHA1 installers and make them available for download from the console for customers who have installed the SHA1 certificate.
  • Improved Server Certificate Handling: When you create or import a new server certificate, the pending certificate now displays to the right of the current certificate. The date and time of the certificate swap displays at the bottom of the pending certificate.
  • Under Security Status for the current server certificate, two new items display: Certificate List Hash: Displays the unique hash associated with this specific certificate. Active Communication Key: Displays the unique key used to encrypt communications with the agent when the secure communication certificate between them becomes invalid.
  • Created a New Communication State for Throttled Agents: On the Computers page, there is a new column option called, Communication State. The displayed options in this field are: Normal: indicates that the agent is communicating normally with the server using the current security certificate. Throttled: occurs when agent is relying on the communication key for encrypted communication. The agent remains in a throttled state until it retrieves the updated communication certificate and no longer relies on the communication key.

    • App Control Server 8.11.0

    Changes to this user guide include:

    • You can now specify a specific visual theme for your App Control server user interface.

      Options include:

      • Carbon Black (default)
      • Legacy Blue
      • Dark
      • Plum

      For more details, see: Preference Settings for Console Users.

    • You can now specify the server type in the general settings tab of the system configuration.
      Important: The OER recommends specific resources based on your server type. Selecting the correct option ensures the accuracy of your system health indicators. Options include:
      • Bare Metal
      • VMware vSphere
      • Microsoft Azure
      • Amazon Web Services (AWS)
      • Google Cloud

      For more details, see: The General Configuration Tab.

    • You can now use the Search field on the Files Catalog and Files on Computers pages to search for files using specified criteria.

      This reduces the length of the table and helps you find the files that you need. The list dynamically updates as you type or you can press Enter on the keyboard. A filter matching your search criteria displays above the search bar. Click Apply to apply the criteria to the table.

      Tip: If you select Automatically apply before entering the search criteria, the table will update automatically. In the filter pane, click Reset to remove the filter from the table.

      For more details, see: File Catalog or Files on Computers.

    • You can no longer accidently disable all of your client registration codes.

      If you attempt to disable the last client registration code, a message displays that you cannot do that. See: Manage Client Registration Codes

    • On the Computers page, customers with Carbon Black EDR will now see EDR Sensor Version and EDR Sensor Status as table column headings.

      This distinguishes Carbon Black EDR Sensors from the Carbon Black App Control Agents.

    • A new alert displays when a significant number of agents are communicating with the server using the communication key: Communication Key Over-Usage.

      Because the server performance can degrade as the number of agents using the communication key increases, this alert provides you the opportunity to resolve the issue before it impacts the server performance. You can remediate the problem by installing the trusted certificate file containing the server's current certificate on the affected agents.

      For more information, see: Built-in Alerts table in the topic: Using Carbon Black App Control Alerts

      Important: On the Computers page, there is a new column option for Using Communication Key. It is a yes/no field.
    • API tokens can no longer be generated by admins for all users.

      A new user role called, "Use API" allows users to create their own API tokens on the user settings page. By default, the Administrator user group has this permission.

      Upon upgrade from versions prior to 8.11.0, all users with API tokens will have the Use API permission added.

      For more information, see: Create an API User and Get its API Token

    • In order to make license count easier to understand, we’ve added a new “Licensing” display in the console. This should make it easier for customers to understand how many total active licenses they have as well as any additional features they have enabled. See: Viewing Your Carbon Black App Control License Limits and Usage