App Control: Can App Control approve JAR files by publisher or certificate?
search cancel

App Control: Can App Control approve JAR files by publisher or certificate?

book

Article ID: 289010

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Can App Control approve JAR files by publisher or certificate?

Environment

  • App Control Server: All Supported Versions
  • App Control Agent: All Supported Versions
  • JVM Java Environment
  • Windows OS: All Versions

Resolution

No. App Control cannot approve JAR files by publisher or certificate.

Additional Information

  • The App Control product uses the Windows native WinVerifyTrust API, and so if Powershell doesn't support it, App Control won't either unfortunately. Basically, the cert/signature verification works with embedded and detached Authenticode signatures.
  • JAR signing is specific to Java and verifying JAR signatures occurs only in the JVM, so outside processes like parity.exe won't track that behavior.