App Control: Can App Control approve JAR files by publisher or certificate?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Can App Control approve JAR files by publisher or certificate?

Environment

• App Control Server: All Supported Versions
• App Control Agent: All Supported Versions
• JVM Java Environment
• Windows OS: All Versions

Resolution

No. App Control cannot approve JAR files by publisher or certificate.

Additional Information

• The App Control product uses the Windows native WinVerifyTrust API, and so if Powershell doesn't support it, App Control won't either unfortunately. Basically, the cert/signature verification works with embedded and detached Authenticode signatures.
• JAR signing is specific to Java and verifying JAR signatures occurs only in the JVM, so outside processes like parity.exe won't track that behavior.