App Control: Can App Control approve JAR files by publisher or certificate?
book
Article ID: 289010
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Can App Control approve JAR files by publisher or certificate?
Environment
App Control Server: All Supported Versions
App Control Agent: All Supported Versions
JVM Java Environment
Windows OS: All Versions
Resolution
No. App Control cannot approve JAR files by publisher or certificate.
Additional Information
The App Control product uses the Windows native WinVerifyTrust API, and so if Powershell doesn't support it, App Control won't either unfortunately. Basically, the cert/signature verification works with embedded and detached Authenticode signatures.
JAR signing is specific to Java and verifying JAR signatures occurs only in the JVM, so outside processes like parity.exe won't track that behavior.