How to enable/disable sensor bypass via command line

Issue

User needs to place the VMware Carbon Black Cloud sensor into bypass locally.

Environment

VMware Carbon Black Cloud sensor (macOS and Windows)

Resolution

User must acquire the Uninstall Code for the individual endpoint before proceeding. To find the uninstall code:

• Log into the VMware Carbon Black Cloud console.
• Navigate to Inventory > Endpoints.
• Filter for the endpoint(s) that will be placed into or taken out of bypass.
• Click the ">" symbol to view Endpoint Details and annotate the Uninstall Code.

Windows

• Open an elevated command prompt.
• Enable Bypass/Disable Protection
  "C:\Program Files\Confer\Uninstall.exe" /bypass 1 <UninstallCode>
• Disable Bypass/Enable Protection
  "C:\Program Files\Confer\Uninstall.exe" /bypass 0 <UninstallCode>

macOS

• Open a terminal session
• Enable Bypass/Disable Protection
  sudo /Applications/Confer.app/uninstall -b <UninstallCode>
• Disable Bypass/Enable Protection
  sudo /Applications/Confer.app/uninstall -n <UninstallCode>

Note: Currently you cannot move the Linux sensor to bypass locally. Bypass can only be enabled from the console.