Disabling Carbon Black EDR sensor tamper protection locally

Issue

While attempting to manually update or reinstall the sensor the installer fails as tamper protection is active and prevents any files from being modified.

Environment

VMware Carbon Black EDR

Microsoft Windows 

Resolution

Open a command line prompt as a system administrator navigate to

C:\Windows\CarbonBlack\

 Then run the following command:

C:\Windows\CarbonBlack\CbEDRCLI.exe -tamper <override_password>

Note: The <override_password> is the password added to the sensor group tamper protection configuration in the Carbon Black console. 

Reference: EDR: How to Disable Tamper Protection Locally On the Windows Sensor 

Cause

Working as expected, tamper protection will prevent any changes to the sensor files.