App Control: Will the Agent Approve Files Signed With an Expired Certificate?
book
Article ID: 288756
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Will the Agent still issue Approvals to software if the certificate used is expired?
Environment
App Control Console: All Supported Versions
App Control Agent: All Supported Versions
Resolution
An expired certificate will not immediately prevent the Agent from issuing an Approval. As long as the software was signed while the certificate was valid, and the Agent is configured to allow Expired Certificates an Approval should still be issued.
Additional Information
To verify this setting:
Login to the Console and navigate to the gear icon > System Configuration > Advanced Options.
Verify the setting: Expired Certificates: Allow approval of software with expired certificates is currently enabled.