Malwarebytes cloud platform not showing endpoint

If you cannot find a Malwarebytes Endpoint Agent in the Malwarebytes cloud platform, it may be due to endpoints having outdated certificates.

• To confirm this, go to C:\ProgramData\Malwarebytes Endpoint Agent\Logs and open up the EndpointAgent.txt.
• In the Malwarebytes Endpoint Agent log, confirm you see the following error message:
• System.Security.SecurityException: Issue with Authenticode signature Error:2148098053

Cause

The error message above indicates the local endpoint has outdated security certificates.  The Malwarebytes cloud platform and Malwarebytes Endpoint Agent require these certificates to run. The certificates needed for authentication are:

1. Digicert’s certificates to validate our digital signature.
2. Verisign Universal Root Certification Authority certificate is to validate the counter signature by MS.

Resolution

Manually update the local endpoint’s security certificates using the steps below.

Windows Update

The easiest way to solve this issue is to make sure Windows is fully up to date. The certificates we use are ones the computer would normally receive as part of security updates. Once the computer is up to date, go ahead and re-install the endpoint agent software and it should now connect to the cloud console.

Manual Installation

Sometimes the certificates will not be pulled after the windows update. This can be due to security software or a third party network setup preventing the download. If this does occur, please use these instructions to do the steps manually:

Note: You must have Administrator privileges to complete this procedure.

1. On the endpoint machine, go to Digicert and download the following security certificates.
   • DigiCertAssuredIDRootCA.crt
   • DigiCertGlobalRootCA.crt
   • DigiCertHighAssuranceEVRootCA.crt
2. Import the extracted security certificates to the Trusted Root Certification Authorities store.
   • Refer to the instructions in Microsoft’s article Manage Trusted Root Certificates.
3. For Verisign Universal Root Certification Authority, please make sure the computer is up to date on windows updates. If the certificate is still missing or outdated, export one from a machine with a known good version of the certificate.
4. Reinstall the Malwarebytes Endpoint Agent.
   • See the article Manually add endpoints in Malwarebytes cloud platform

After installation is complete, the Malwarebytes Endpoint Agent service starts, and the endpoint appears in the Malwarebytes cloud platform.  In the Malwarebytes cloud platform, click the Endpoints tab to view all reporting Endpoint Agents.

For more information and general guidance on our products & services, please contact us.

Require further support?

Search all Knowledgebase articles

Send a Support Request to The Idency Support Team