Health Check FailureId[670]: Found invalid signature for File SignatureError[00000000]

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Agent is generating Events for Health Check FailureId[670] similar to:

Found invalid signature for File[timedoverride.exe] CertId[199] SignatureError[00000000] Publisher[Carbon Black, Inc.] Thumbprint[c4471377f64484639bd532d3e7e20b0bcdbf16f2] in InstallDir[c:\program files\bit9\parity agent]. Options[00000003] TotalFailures[1] FailureId[670]

Environment

• Agent 8.9.2 and higher
• Microsoft Windows XP (Service Pack 3)
• Microsoft Windows Server 2003 (Service Pack 2)

Cause

Microsoft's CERT_TRUST_STATUS page shows:

CERT_TRUST_NO_ERROR: 0x00000000
No error found for this certificate or chain.

Engineering is currently investigating why the Health Check Failure is being triggered on this result (CRE-18424).

Resolution

In the meantime, a temporary Health Check Exclusion can be added, example:

health_check_exclusions=*SignatureError[00000000]*