Cylance: OPTICS - Unlocking an Endpoint

The purpose of this document is to list the steps required to unlock and endpoint that has been locked down via OPTICS.

Unlocking an endpoint, before the lockdown expires, is a manual process. This manual process requires direct access to the endpoint and the unlock key.

1. In the console, select CylanceOPTICS.
2. Select Devices.
3. Search for and select the device to unlock.
4. Click the Actions menu.
5. Click Show Unlock Key.
   1. Use this key on the locked down endpoint. Each unlock key is unique to each locked down endpoint.
6. On the endpoint, start an administrator Command Prompt:
   • For Windows:
     • Navigate to the CylanceOPTICS executable folder.
       • The default location for CyOptics.exe is: C:\Program Files\Cylance\Optics
     • Run the following command
       • CyOptics.exe control --password "unlock_key" unlock -a
         • Replace "unlock_key" with the Unlock Key in step 5.
   • For macOS
     • Navigate to the CylanceOPTICS folder.
     • cd /Library/Application\ Supprt/Cylance/Optics/CyOptics.app/Contents/Resources
     • Run the following command
       • sudo ../MacOS/CyOptics control --password 'OpticsPassword' unlock -net
         • Replace 'OpticsPassword' with the Unlock Key in step 5.