App Control: Will the Agent Block a File With a Revoked Certificate?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Will the Agent Block a File With a Revoked Certificate?

Environment

• App Control Console: All Supported Versions

Resolution

1. Navigate to Software Rules > Policies
2. Click the relevant policy
3. At the bottom of the screen select the advanced tab
4. Note the setting "Block Files with Banned Publishers or Certificates"
5. If the setting is Active files with a revoked certificate will be blocked when using publisher approvals