Malwarebytes cloud platform not showing endpoint

Document created by vbariteau Employee on Dec 1, 2017Last modified by jgolomb on Nov 1, 2018
Version 13Show Document
  • View in full screen mode

If you cannot find a Malwarebytes Endpoint Agent in the Malwarebytes cloud platform, it may be due to endpoints having outdated certificates. To confirm this, go to C:\ProgramData\Malwarebytes Endpoint Agent\Logs and open up the EndpointAgent.txt.

 

In the Malwarebytes Endpoint Agent log, confirm you see the following error message:

System.Security.SecurityException: Issue with Authenticode signature Error:2148098053

 

Cause

The error message above indicates the local endpoint has outdated security certificates.  The Malwarebytes cloud platform and Malwarebytes Endpoint Agent require these certificates to run. The certificates needed for authentication are:

  1. Digicert's certificates to validate our digital signature.
  2. Verisign Universal Root Certification Authority certificate is to validate the counter signature by MS.

 

Resolution

Manually update the local endpoint's security certificates using the steps below.

 

Windows Update

The easiest way to solve this issue is to make sure Windows is fully up to date. The certificates we use are ones the computer would normally receive as part of security updates. Once the computer is up to date, go ahead and re-install the endpoint agent software and it should now connect to the cloud console. 

 

Manual Installation

Sometimes the certificates will not be pulled after the windows update. This can be due to security software or a third party network setup preventing the download. If this does occur, please use these instructions to do the steps manually:

 

Note: You must have Administrator privileges to complete this procedure.

 

  1. On the endpoint machine, go to Digicert and download the following security certificates.
    • DigiCertAssuredIDRootCA.crt
    • DigiCertGlobalRootCA.crt
    • DigiCertHighAssuranceEVRootCA.crt
  2. Import the extracted security certificates to the Trusted Root Certification Authorities store.
  3. For Verisign Universal Root Certification Authority, please make sure the computer is up to date on windows updates. If the certificate is still missing or outdated, export one from a machine with a known good version of the certificate. 
  4. Reinstall the Malwarebytes Endpoint Agent.

 

After installation is complete, the Malwarebytes Endpoint Agent service starts, and the endpoint appears in the Malwarebytes cloud platform.  In the Malwarebytes cloud platform, click the Endpoints tab to view all reporting Endpoint Agents.

 

Additional information

2 people found this helpful

Attachments

    Outcomes