VMware Carbon Black Cloud Endpoint Sensor System Requirements

Summary: Learn about the system requirements that must be met when installing the VMware Carbon Black Cloud Endpoint sensor.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

This article covers the system requirements for installing the VMware Carbon Black Cloud Endpoint sensor.

Affected Products:

  • VMware Carbon Black Cloud Endpoint

Affected Operating Systems:

  • Windows
  • Mac
  • Linux

The VMware Carbon Black Cloud Endpoint sensor has specific Software, Hardware, Network, and Anti-virus requirements. Click the appropriate tab for more information.

Software

Click either Windows, Mac, or Linux for specific platform software requirements.

Windows

General Requirements:

  • Local Administration rights for installation

Internet Browser:

  • Mozilla Firefox, Google Chrome, and Microsoft Edge

Requirements differ between 3.7 and Later, v3.6, v3.5, and v3.4. Click the appropriate VMware Carbon Black Cloud Endpoint version for additional software requirements. For more information, reference How to Identify the VMware Carbon Black Cloud Endpoint Sensor Version.

v3.7 and Later

Operating Systems (64 and 32 bit):

  • Desktop:
    • Windows 111
    • Windows 101
      • v21H2 (November 2021 Update)
      • v21H1 (May 2021 Update)
      • v20H2 (October 2020 Update)
      • v2004 (May 2020 Update - 20H1)
      • v1909 (November 2019 Update - 19H2)
      • v1903 (May 2019 Update - 19H1)
      • v1809 (October 2018 Update - Redstone 5)
      • v1803 (Spring Creators Update - Redstone 4)
      • v1709 (Fall Creators Update - Redstone 3)
      • v1703 (Creators Update - Redstone 2)
      • v1607 (Anniversary Update - Redstone)
      • v1511 (November Update - Threshold 2)
    • Windows 10 Long-Term Servicing Channel
      • Windows 10 Enterprise LTSC 2019
      • Windows 10 Enterprise LTSC 2016
      • Windows 10 Enterprise LTSC 2015
    • Windows 8.1
      • SP1
      • Update 2
      • Update 1
    • Windows 8
      • SP0
    • Windows 72
      • SP1
      • SP0
  • Server:
    • Windows Server 20193
    • Windows Server 20163
      • SP0
    • Windows Server 2012 R23
      • SP0
    • Windows Server 20123
      • SP1
      • SP0
    • Windows Server 2008 R223
      • SP1
      • SP0

1Unlisted Windows feature updates are not supported. For a status on all feature updates, reference Dell Data Security Windows Version Compatibility.
2Requires Microsoft KB Update 4474419 (https://support.microsoft.com/help/4474419This hyperlink is taking you to a website outside of Dell Technologies.) and 4490628 (https://support.microsoft.com/help/4490628This hyperlink is taking you to a website outside of Dell Technologies.). For more information about this requirement, reference SHA-1 Signing Certificate Expiration and Deprecation on Dell Data Security Products.
3Server Core (2008, 2012, 2016, 2019) editions are not supported.

v3.6

Operating Systems (64 and 32 bit):

  • Desktop:
    • Windows 101
      • v21H1 (May 2021 Update)
      • v20H2 (October 2020 Update)
      • v2004 (May 2020 Update - 20H1)
      • v1909 (November 2019 Update - 19H2)
      • v1903 (May 2019 Update - 19H1)
      • v1809 (October 2018 Update - Redstone 5)
      • v1803 (Spring Creators Update - Redstone 4)
      • v1709 (Fall Creators Update - Redstone 3)
      • v1703 (Creators Update - Redstone 2)
      • v1607 (Anniversary Update - Redstone)
      • v1511 (November Update - Threshold 2)
    • Windows 10 Long-Term Servicing Channel
      • Windows 10 Enterprise LTSC 2019
      • Windows 10 Enterprise LTSC 2016
      • Windows 10 Enterprise LTSC 2015
    • Windows 8.1
      • SP1
      • Update 2
      • Update 1
    • Windows 8
      • SP0
    • Windows 72
      • SP1
      • SP0
  • Server:
    • Windows Server 20193
    • Windows Server 20163
      • SP0
    • Windows Server 2012 R23
      • SP0
    • Windows Server 20123
      • SP1
      • SP0
    • Windows Server 2008 R223
      • SP1
      • SP0

1Unlisted Windows 10 feature updates are not supported. For a status on all feature updates, reference Dell Data Security Windows Version Compatibility.
2Requires Microsoft KB Update 4474419 (https://support.microsoft.com/help/4474419This hyperlink is taking you to a website outside of Dell Technologies.) and 4490628 (https://support.microsoft.com/help/4490628This hyperlink is taking you to a website outside of Dell Technologies.). For more information about this requirement, reference SHA-1 Signing Certificate Expiration and Deprecation on Dell Data Security Products.
3Server Core (2008, 2012, 2016, 2019) editions are not supported.

v3.5

Operating Systems (64 and 32 bit):

  • Desktop:
    • Windows 101
      • v20H2 (October 2020 Update)
      • v2004 (May 2020 Update - 20H1)
      • v1909 (November 2019 Update - 19H2)
      • v1903 (May 2019 Update - 19H1)
      • v1809 (October 2018 Update - Redstone 5)
      • v1803 (Spring Creators Update - Redstone 4)
      • v1709 (Fall Creators Update - Redstone 3)
      • v1703 (Creators Update - Redstone 2)
      • v1607 (Anniversary Update - Redstone)
      • v1511 (November Update - Threshold 2)
    • Windows 10 Long-Term Servicing Channel
      • Windows 10 Enterprise LTSC 2019
      • Windows 10 Enterprise LTSC 2016
      • Windows 10 Enterprise LTSC 2015
    • Windows 8.1
      • SP1
      • Update 2
      • Update 1
    • Windows 8
      • SP0
    • Windows 72
      • SP1
      • SP0
  • Server:
    • Windows Server 20193
    • Windows Server 20163
      • SP0
    • Windows Server 2012 R23
      • SP0
    • Windows Server 20123
      • SP1
      • SP0
    • Windows Server 2008 R223
      • SP1
      • SP0

1Unlisted Windows 10 feature updates are not supported. For a status on all feature updates, reference Dell Data Security Windows Version Compatibility.
2Requires Microsoft KB Update 4474419 (https://support.microsoft.com/help/4474419This hyperlink is taking you to a website outside of Dell Technologies.) and 4490628 (https://support.microsoft.com/help/4490628This hyperlink is taking you to a website outside of Dell Technologies.). For more information about this requirement, reference SHA-1 Signing Certificate Expiration and Deprecation on Dell Data Security Products.
3Server Core (2008, 2012, 2016, 2019) editions are not supported.

Note: To determine Windows 10 feature update versions, reference Which Version of Windows Operating System am I Running?This hyperlink is taking you to a website outside of Dell Technologies.
v3.4

Operating Systems (64 and 32 bit):

  • Desktop:
    • Windows 101
      • v1909 (November 2019 Update - 19H2)
      • v1903 (May 2019 Update - 19H1)
      • v1809 (October 2018 Update - Redstone 5)
      • v1803 (Spring Creators Update - Redstone 4)
      • v1709 (Fall Creators Update - Redstone 3)
      • v1703 (Creators Update - Redstone 2)
      • v1607 (Anniversary Update - Redstone)
      • v1511 (November Update - Threshold 2)
    • Windows 10 Long-Term Servicing Channel
      • Windows 10 Enterprise LTSC 2019
      • Windows 10 Enterprise LTSC 2016
      • Windows 10 Enterprise LTSC 2015
    • Windows 8.1
      • SP1
      • Update 2
      • Update 1
    • Windows 8
      • SP0
    • Windows 72
      • SP1
      • SP0
  • Server:
    • Windows Server 20193
    • Windows Server 20163
      • SP0
    • Windows Server 2012 R23
      • SP0
    • Windows Server 20123
      • SP1
      • SP0
    • Windows Server 2008 R223
      • SP1
      • SP0

1Unlisted Windows 10 feature updates are not supported. For a status on all feature updates, reference Dell Data Security Windows Version Compatibility.
2Requires Microsoft KB Update 4474419 (https://support.microsoft.com/help/4474419This hyperlink is taking you to a website outside of Dell Technologies.) and 4490628 (https://support.microsoft.com/help/4490628This hyperlink is taking you to a website outside of Dell Technologies.). For more information about this requirement, reference SHA-1 Signing Certificate Expiration and Deprecation on Dell Data Security Products.
3Server Core (2008, 2012, 2016, 2019) editions are not supported.

Note: To determine Windows 10 feature update versions, reference Which Version of Windows Operating System am I Running?This hyperlink is taking you to a website outside of Dell Technologies.

Mac

Note: Local Scanning functionality is not available for Carbon Black Cloud Endpoint sensors running on macOS.

General Requirements:

  • Local Administration rights for installation

Internet Browser:

  • Mozilla Firefox, Google Chrome, and Microsoft Edge

Requirements differ between v3.6.1.10, v3.5.3.82, v3.5.1.23 to 3.5.2.78, v3.3.4 to 3.4.4.51, v3.3.3, and v3.3.1 and Earlier. Click the appropriate VMware Carbon Black Cloud Endpoint version for additional software requirements. For more information, reference How to Identify the VMware Carbon Black Cloud Endpoint Sensor Version.

v3.6.1.10
Warning:
  • macOS Monterey 12.0.0 and later
  • macOS Big Sur 11.0.1 and later
  • macOS Catalina 10.15.0 to 10.15.7
Note: VMware Carbon Black 3.6.1 and later offers native support for Apple M1-based processors. LiveOps (OSQuery) continues to leverage Rosetta.
v3.5.3.82
Warning:
  • macOS Big Sur 11.0.1 and later
  • macOS Catalina 10.15.0 to 10.15.7
  • macOS Mojave 10.14.6
v3.5.1.23 to 3.5.2.78
Warning:
  • macOS Big Sur 11.0.1 and later
  • macOS Catalina 10.15.0 to 10.15.7
  • macOS Mojave 10.14.6
  • macOS High Sierra 10.13.6
  • macOS Sierra 10.12.6
v3.3.4 to 3.4.4.51
Warning:
  • macOS Catalina 10.15.0 to 10.15.7
  • macOS Mojave 10.14.6
  • macOS High Sierra 10.13.6
  • macOS Sierra 10.12.6
  • Mac OS X El Capitan 10.11.6
  • Mac OS X Yosemite 10.10.5
v3.3.3
Warning:
  • macOS Catalina 10.15.0
  • macOS Mojave 10.14.6
  • macOS High Sierra 10.13.6
  • macOS Sierra 10.12.6
  • Mac OS X El Capitan 10.11.6
  • Mac OS X Yosemite 10.10.5
v3.3.1 and Earlier
Warning:
  • macOS Mojave 10.14.6
  • macOS High Sierra 10.13.6
  • macOS Sierra 10.12.6
  • Mac OS X El Capitan 10.11.6
  • Mac OS X Yosemite 10.10.5

Linux

General Requirements:

  • Sudo rights for installation

Click either Amazon Linux 2, CentOS, OpenSUSE, Oracle RHCK Kernel, Oracle UEK Kernel, Red Hat Enterprise Linux, SUSE, or Ubuntu for additional software requirements. For more information, reference How to Identify the VMware Carbon Black Cloud Endpoint Sensor Version.

Note:
  • VMware Carbon Black Cloud v2.12 introduces Background Scan to supported Linux operating systems.
  • For more information about the Carbon Black products listed in this section, reference What is VMware Carbon Black Cloud
Amazon Linux 2
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
Amazon Linux 2 Not applicable 2.4.0 and later 2.11.0 and later 2.10.1 and later
CentOS
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
CentOS 8 8.0 and later 2.4.0 and later 2.11.0 and later 2.10.1 and later
CentOS 7 7.9 2.4.0 and later 2.9.1 and later 2.9.1 and later
CentOS 7 7.8 2.4.0 and later 2.7.1 and later 2.7.1 and later
CentOS 7 7.0 to 7.7 2.4.0 and later 2.7.0 and later 2.7.0 and later
CentOS 6 6.6 to 6.10 2.4.0 and later 2.7.0 and later 2.7.0 and later
CentOS 6 6.0 to 6.5 2.4.0 to 2.9.1 Not applicable Not applicable
OpenSUSE
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
OpenSUSE 42 42.2 to 42.3 2.4.0 and later 2.11.0 and later 2.10.1 and later
OpenSUSE 15 15.0 to 15.1 2.4.0 and later 2.11.0 and later 2.10.1 and later
Oracle RHCK Kernel
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
Oracle 8 8.0 and later 2.8.1 2.11.0 and later 2.10.1 and later
Oracle 7 7.9 2.8.1 and later 2.9.1 and later 2.9.1 and later
Oracle 7 7.0 to 7.8 2.8.1 and later 2.8.0 and later 2.8.0 and later
Oracle 6 6.6 to 6.10 2.4.0 and later 2.8.0 and later 2.8.0 and later
Oracle 6 6.0 to 6.5 2.4.0 to 2.9.1 2.8.0 and later Not applicable
Oracle UEK Kernel
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
Oracle 8 8.0 and later 2.8.1 and later 2.11.0 and later 2.10.1 and later
Oracle 7 7.9 2.8.1 and later 2.9.1 and later 2.9.1 and later
Oracle 7 7.6 to 7.8 2.8.1 and later 2.8.0 and later 2.8.0 and later
Oracle 7 7.0 to 7.5 2.8.1 and later Not applicable 2.8.0 and later
Oracle 6 6.6 to 6.10 2.4.0 and later Not applicable 2.8.0 and later
Oracle 6 6.0 to 6.5 2.8.1 to 2.9.1 Not applicable Not applicable
Red Hat Enterprise Linux
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
Red Hat Enterprise Linux 8 8.0 and later 2.4.0 and later 2.11.0 and later 2.10.1 and later
Red Hat Enterprise Linux 7 7.9 2.4.0 and later 2.9.1 and later 2.9.1 and later
Red Hat Enterprise Linux 7 7.8 2.4.0 and later 2.7.1 and later 2.7.1 and later
Red Hat Enterprise Linux 7 7.0 to 7.7 2.4.0 and later 2.7.0 and later 2.7.0 and later
Red Hat Enterprise Linux 6 6.6 to 6.10 2.4.0 and later 2.7.0 and later 2.7.0 and later
Red Hat Enterprise Linux 6 6.0 to 6.5 2.4.0 to 2.9.1 Not applicable Not applicable
SUSE
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
SUSE 15 15.0 to 15.2 2.4.0 and later 2.11.0 and later 2.10.1 and later
SUSE 12 12.2 to 12.5 2.4.0 and later 2.11.0 and later 2.10.1 and later
Ubuntu
Distribution Distribution Version VMware Carbon Black Cloud Audit and Remediation VMware Carbon Black Cloud Endpoint Standard VMware Carbon Black Cloud Enterprise EDR
Ubuntu 21 21.04 2.11.3 and later 2.11.0 and later 2.10.1 and later
Ubuntu 20 20.04 LTS 2.4.0 and later 2.11.0 and later 2.10.1 and later
Ubuntu 19 19.04 LTS, 19.10 2.4.0 and later 2.11.0 and later 2.10.1 and later
Ubuntu 18 18.04 LTS, 18.10 2.4.0 and later 2.11.0 and later 2.10.1 and later
Ubuntu 16 16.04 LTS 2.4.0 to 2.11.3 2.11.0 to 2.11.3 2.10.1 to 2.11.3

Hardware

Minimum Hardware Requirements:

  • CPU: 2 GHz multi-core
  • RAM: 2 GB
  • Disk Space: 500 MB
    • +600 MB if local scanning is enabled or using ThreatHunter.
  • Network Card: 100/1000 Mbps

Network

Protocols:

  • TLS: 1.2 or later

External destinations vary based on the geographic zone of purchase. Click either Americas, Europe, or Asia-Pacific for more information.

Americas

Configure firewalls or proxies to allow outgoing and incoming connection to the following destinations without packet inspection.

Function Primary Port Backup Port Destination IP Address Notes
Administration 443 54443 defense-prod05.conferdeploy.net/ Dynamic Not applicable
Client 443 54443 dev-prod05.conferdeploy.net/ Dynamic Not applicable
Integration Services (API) 443 54443 defense-prod05.conferdeploy.net/ Dynamic Not applicable
Signature Updates 80 4431 updates2.cdc.carbonblack.io Dynamic Not applicable
Content Management System 443 54443 Content.carbonblack.io Dynamic Required for 3.6 and newer agents
Online Certificate Status Protocol 80 Not applicable ocsp.godaddy.com Dynamic Not applicable
Online Certificate Status Protocol 443 Not applicable d.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable crl.godaddy.com Dynamic Not applicable
Certificate Revocation List 80 Not applicable sv.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s1.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s2.symcb.com Dynamic Required for 3.7.0.1503 and later installers

1To leverage 443, or SSL/TLS connections for Signature Updates, the assigned policy group must have https://updates2.cdc.carbonblack.io defined within the Update Servers For Onsite Devices, or Update Servers for Offsite Devices.

Note: Signature Updates are only required on Windows Carbon Black Cloud Endpoint sensors if using Local Scanning functionality and "Allow Signature Updates" is enabled in the VMware Carbon Black Cloud.

Europe

Configure firewalls or proxies to allow outgoing and incoming connection to the following destinations without packet inspection.

Function Primary Port Backup Port Destination IP Address Notes
Administration 443 54443 defense-eu.conferdeploy.net/ Dynamic Not applicable
Client 443 54443 dev-prod06.conferdeploy.net/ Dynamic Not applicable
Integration Services (API) 443 54443 defense-eu.conferdeploy.net/ Dynamic Not applicable
Signature Updates 80 4431 updates2.cdc.carbonblack.io Dynamic Not applicable
Content Management System 443 54443 Content.carbonblack.io Dynamic Required for 3.6 and newer agents
Online Certificate Status Protocol 80 Not applicable ocsp.godaddy.com Dynamic Not applicable
Online Certificate Status Protocol 443 Not applicable d.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable crl.godaddy.com Dynamic Not applicable
Certificate Revocation List 80 Not applicable sv.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s1.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s2.symcb.com Dynamic Required for 3.7.0.1503 and later installers

1To leverage 443, or SSL/TLS connections for Signature Updates, the assigned policy group must have https://updates2.cdc.carbonblack.io defined within the Update Servers For Onsite Devices, or Update Servers for Offsite Devices.

Note: Signature Updates are only required on Windows Carbon Black Cloud Endpoint sensors if using Local Scanning functionality and "Allow Signature Updates" is enabled in the VMware Carbon Black Cloud.

Asia-Pacific

Configure firewalls or proxies to allow outgoing and incoming connection to the following destinations without packet inspection.

Function Primary Port Backup Port Destination IP Address Notes
Administration 443 54443 defense-prodnrt.conferdeploy.net/ Dynamic Not applicable
Client 443 54443 dev-prodnrt.conferdeploy.net/ Dynamic Not applicable
Integration Services (API) 443 54443 defense-prodnrt.conferdeploy.net/ Dynamic Not applicable
Signature Updates 80 4431 updates2.cdc.carbonblack.io Dynamic Not applicable
Content Management System 443 54443 Content.carbonblack.io Dynamic Required for 3.6 and newer agents
Online Certificate Status Protocol 80 Not applicable ocsp.godaddy.com Dynamic Not applicable
Online Certificate Status Protocol 443 Not applicable d.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable crl.godaddy.com Dynamic Not applicable
Certificate Revocation List 80 Not applicable sv.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s1.symcb.com Dynamic Required for 3.7.0.1503 and later installers
Certificate Revocation List 80 Not applicable s2.symcb.com Dynamic Required for 3.7.0.1503 and later installers

1To leverage 443, or SSL/TLS connections for Signature Updates, the assigned policy group must have https://updates2.cdc.carbonblack.io defined within the Update Servers For Onsite Devices, or Update Servers for Offsite Devices.

Note: Signature Updates are only required on Windows Carbon Black Cloud Endpoint sensors if using Local Scanning functionality and "Allow Signature Updates" is enabled in the VMware Carbon Black Cloud.

Anti-virus

Dell and VMware recommend the following exclusions if running VMware Carbon Black Cloud alongside an existing anti-virus. Click Windows, Mac, or Linux for more information.

Windows

Directories:

C:\Program Files\Confer\
C:\Programdata\CarbonBlack\

Files:

C:\Windows\System32\drivers\ctifile.sys
C:\Windows\System32\drivers\ctinet.sys
C:\Windows\System32\drivers\cbelam.sys
C:\Windows\system32\drivers\cbdisk.sys
C:\Windows\Syswow64\ctintev.dll
C:\Program Files\confer\Blades\LiveQuery\osqueryi.exe
C:\Program Files\confer\repmgr.exe
C:\Program Files\confer\scanner\upd.exe

Mac

Exclusions differ between v3.5 and Later and v3.4 and Earlier. Click the appropriate VMware Carbon Black Cloud Endpoint version for additional software requirements. For more information, reference, reference How to Identify the VMware Carbon Black Cloud Endpoint Sensor Version.

v3.5 and Later

Directories:

/Applications/VMware Carbon Black Cloud
/Library/Application Support/com.vmware.carbonblack.cloud/
/Library/Extensions/CbDefenseSensor.kext
v3.4 and Earlier

Directories:

/Applications/Confer.app/

Linux

Directories:

/Applications/Confer.app/

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Affected Products

VMware Carbon Black
Article Properties
Article Number: 000126165
Article Type: How To
Last Modified: 18 Apr 2025
Version:  27
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.