App Control: How to Confirm If Certificate Verification Is Enabled
search cancel

App Control: How to Confirm If Certificate Verification Is Enabled

book

Article ID: 286156

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To confirm if certificate validation is enabled for the agent communication certificate.

Environment

  • App Control Console: All Supported Versions

Resolution

Via Dascli commands:
  1. Login to a device that currently has a AppControl agent installed
  2. Open an admin CMD prompt
  3. Run commands:
    cd c:\program files (x86)\bit9\parity agent
    dascli status
    
  4. Under "Client Information" confirm what "SSL Mode" is set to
    • Weak = Certificate Verification is disabled
    • Strong = Certificate Verification is enabled
Via the AppControl  Console:
  1. Login to the AppControl  console
  2. Navigate to System Configuration (gear icon in 8.x) > Security tab.
  3. Under "Security Status" confirm if "Certificate Verification" is set to disabled or enabled