Product Troubleshooting WithSecure Elements Endpoint Detection and Response

EDR sensor for Windows endpoint is shown as disabled in Elements security Center
How to test the Elements Endpoint Detection and Response sensors?
What data does the WithSecure Elements Endpoint Detection and Response sensor collect?
WithSecure and the MITRE “Turla” results
Changes in the new Broad Context Detection (BCD) details view
Changes in EDR Automated responses
Improvements in Broad Context Detection handling
How to activate WithSecure Elements Endpoint Detection and Response when using Policy Manager?
Why are the quick action buttons (such as “Isolate Affected Device” and “Scan Device”) under the Broad Context Detection details view greyed out in the Elements Security Center?
Endpoint Detection and Response (EDR) sensor in Business Suite Client Security or Server Security is unable to connect to the backend

EDR sensor for Windows endpoint is shown as disabled in Elements security Center

Issue:

EDR Sensor Disabled is shown in Elements Security Center even after uninstall/re-installation.

Resolution:

Giving following permission to registry in administration right.

Registry


HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\SystemCertificates\CA

Permission


“Local Service” and “Network Service”

This is most probably caused by system roll back software.

Article no: 000045901