App Control: Will the Agent Approve Files Signed With an Expired Certificate?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Will the Agent still issue Approvals to software if the certificate used is expired?

Environment

• App Control Console: All Supported Versions
• App Control Agent: All Supported Versions

Resolution

An expired certificate will not immediately prevent the Agent from issuing an Approval. As long as the software was signed while the certificate was valid, and the Agent is configured to allow Expired Certificates an Approval should still be issued.

Additional Information

To verify this setting:

1. Login to the Console and navigate to the gear icon > System Configuration > Advanced Options.
2. Verify the setting: Expired Certificates: Allow approval of software with expired certificates is currently enabled.