App Control: What should be considered when switching between certificate types?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What are the considerations when switching between self-signed and CA certs or vice-versa?

Environment

App Control: All Supported Versions

Resolution

• With the Certificate Validation option turned on admins should check the cert store of endpoints to ensure the new certificate is present and will be accepted for communication by the OS regardless of certificate type
• If Certificate Validation is disabled, only self-signed certificates must be confirmed on endpoints as most third-party CA certs will be verified regardless