Software exclusion by Digital certificate (SEPM/SEP)

[Blanca Diego]

we have many programmers writing code. Creating execution folders on systems gives a safe haven for infected files. Currently that’s what I’m doing.

We want to offer a file exclusion by Digital signature (Certificate).
We have already a certificate. Does symantec have any procedure to know how to sign the files with the certificate?

After that, we will create a certificate exclusion in order not to quarantine/delete files.

Thanks

[Rafeeq]

simillar question, did you see this?

This can be done in SEPM 14 RU1, see here:

http://www.symantec.com/docs/HOWTO127153

https://www.symantec.com/connect/ideas/software-exclusion-digital-certificate-sepmsep

[Blanca Diego]

Yes, I already checked these link

What we need to know if there is a procedure provided by Symantec that explains how to sign a file in order to be excuded after that

Someone have been alredy done it ?

thanks

[Rafeeq]

you will be using a cert to sign your files, once that cert is excluded by Symantec endpoint then all the files which are signed by those cert are also excluded.

https://knowledge.symantec.com/support/code-signing-support/index?page=content&actp=CROSSLINK&id=SO20528

[ℬrίαη]

Are you planning to self-sign or purchase a cert?