VMware Carbon Black Cloud Sensor CbELAM.sys Installation Error

Summary: When the VMware Carbon Black Cloud Endpoint sensor is uninstalled and reinstalled, the installation attempt fails.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Affected Products:

  • VMware Carbon Black Cloud Endpoint

Affected Versions:

  • 3.4.0.820 and Later

Affected Platforms:

  • Windows

Cause

To confirm the issue:

  1. Go to %temp%.
    Note: This location can differ if modified during installation.
  2. Double-click confer-temp.log.
  3. In the log, search for CbELAM.sys. 
    CopyDriver: ERROR: copy CbELAM.sys failed: 3
InstallFileDriver: ERROR: copy CbELAM.sys failed
install: InstallAll: returning error

    This is caused because CBeLAM.sys was not removed properly during the uninstall of the VMware Carbon Black Cloud sensor.

Resolution

From an administrator command prompt, run the following before attempting to reinstall. No reboot is required.

MKDIR C:\Windows\ELAMBKUP
DEL /F C:\Windows\System32\drivers\CbELAM.sys

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Affected Products

VMware Carbon Black
Article Properties
Article Number: 000129611
Article Type: Solution
Last Modified: 03 Feb 2025
Version:  12
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.