How to Manage the CrowdStrike Falcon Sensor Maintenance Token
Сводка: Learn how to manage the CrowdStrike Falcon Sensor maintenance token with these instructions to enable, locate, or disable the token from the Falcon console.
Данная статья применяется к
Данная статья не применяется к
Эта статья не привязана к какому-либо конкретному продукту.
В этой статье указаны не все версии продуктов.
Симптомы
This article provides steps to enable, locate, and disable the CrowdStrike Falcon Sensor maintenance token.
Affected Products:
- CrowdStrike Falcon Sensor
Affected Versions:
- v5.10.0 and Later
Affected Operating Systems:
- Windows
- Mac
- Linux
Причина
Not applicable
Разрешение
In CrowdStrike Falcon Sensor v5.10 and later, a maintenance token is used to protect the software from unauthorized removal or tampering. The maintenance token replaces the previous password protection feature. A CrowdStrike falcon administrator can Enable, Locate, or Disable maintenance tokens in their environment. Click the appropriate action for more information.
Note: New Sensor Update Policies have Uninstall and maintenance protection enabled for individual hosts. These steps are only required for older Sensor Update Policies or enabling Bulk maintenance mode.
- In a Google Chrome or Microsoft Edge browser, go to your Falcon Console login URL.
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Falcon US-2: https://falcon.us-2.crowdstrike.com/login/
- Falcon EU-1: https://falcon.eu-1.crowdstrike.com/login/
- Falcon US-GOV-1: https://falcon.laggar.gcw.crowdstrike.com/login/
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Populate the CrowdStrike account holder’s credentials, and then click Log In.
- In the left menu pane, select Host setup and management and then select Sensor update policies.
- Select the targeted Sensor Update Policy Name and then click Edit Policy.
Note: The Sensor Update Policy Name may differ in your environment.
- Turn on Uninstall and maintenance protection.
- If using Bulk maintenance mode, go to Step 7. Otherwise, go to Step 9.
- Under Sensor version, select Sensor version updates off.
- Turn on Bulk maintenance mode.
- To the right of Sensor update policy settings, click Save.
- Confirm the policy change.
Note: Online hosts may take up to five minutes to receive the new policy.
A maintenance token can be configured to:
- Individual hostnames using a unique token
- Bulk groups using a static token
Click Individual or Bulk for location information.
Individual
- In a Google Chrome or Microsoft Edge browser, go to your Falcon Console login URL.
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Falcon US-2: https://falcon.us-2.crowdstrike.com/login/
- Falcon EU-1: https://falcon.eu-1.crowdstrike.com/login/
- Falcon US-GOV-1: https://falcon.laggar.gcw.crowdstrike.com/login/
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Populate the CrowdStrike account holder’s credentials, and then click Log In.
- In the left menu pane, select Host setup and management and then select Host management.
Note: The layout in the example may differ slightly from your environment.
- Locate and then click the targeted Hostname.
- In the hostname display, click Reveal maintenance token.
Note: Reveal maintenance token is disabled if bulk maintenance token is enabled.
- Optionally, input a Reason for Token Reveal and then click Reveal Token.
- Record the hostname Maintenance Token and then click Done.
Note: The Maintenance Token will differ in your environment.
Bulk
- In a Google Chrome or Microsoft Edge browser, go to your Falcon Console login URL.
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Falcon US-2: https://falcon.us-2.crowdstrike.com/login/
- Falcon EU-1: https://falcon.eu-1.crowdstrike.com/login/
- Falcon US-GOV-1: https://falcon.laggar.gcw.crowdstrike.com/login/
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Populate the CrowdStrike account holder’s credentials, and then click Log In.
- In the left menu pane, select Host setup and management and then select Sensor update policies.
- Select the targeted Sensor Update Policy Name and then click Edit Policy.
Note:
- The Sensor Update Policy Name can also be located under the specific hostname in Host Management.
- The Sensor Update Policy Name may differ in your environment.
- Under Bulk maintenance mode, click REVEAL TOKEN.
- Optionally, input a Reason for Token Reveal and then click Reveal Token.
- Record the Policy Maintenance Token and then click Done.
Warning:
- A Policy Maintenance Token is not re-created on reinstall.
- A Policy Maintenance Token should not be provided directly to the end user.
- The Policy Maintenance Token will differ in your environment.
- In a Google Chrome or Microsoft Edge browser, go to your Falcon Console login URL.
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Falcon US-2: https://falcon.us-2.crowdstrike.com/login/
- Falcon EU-1: https://falcon.eu-1.crowdstrike.com/login/
- Falcon US-GOV-1: https://falcon.laggar.gcw.crowdstrike.com/login/
- Falcon US-1: https://falcon.crowdstrike.com/login/
- Populate the CrowdStrike account holder’s credentials, and then click Log In.
- In the left menu pane, select Host setup and management and then select Sensor update policies.
- Select the targeted Sensor Update Policy Name and then click Edit Policy.
Note: The Sensor Update Policy Name may differ in your environment.
- Turn off Uninstall and maintenance protection.
- To the right of Sensor update policy settings, click Save.
- Confirm the policy change.
Note:
- If Bulk maintenance mode was enabled, it will be disabled after clicking Confirm.
- Online hosts may take up to five minutes to receive the new policy.
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.
Затронутые продукты
CrowdStrikeСвойства статьи
Номер статьи: 000130591
Тип статьи: Solution
Последнее изменение: 09 Feb 2024
Версия: 16
Получите ответы на свои вопросы от других пользователей Dell
Услуги технической поддержки
Проверьте, распространяются ли на ваше устройство услуги технической поддержки.