App Control: How To Install The New SHA1 App Control Root Certificate

[#1]

Environment

• App Control Server: 8.6.0 - 8.9.4
• App Control Agent: 8.9.0 and higher
• Microsoft Windows: All Supported Versions

Objective

How to install the new SHA1 VMware App Control Root Certificate on the application server

Resolution

1. Download the App Control SHA1 Root CA.cer.zip
2. Extract the Zip and move the "App Control SHA1 Root CA.cer" file locally onto the App Control server.
3. Using an Admin account double-click the file to open the Certificate properties and select "Install Certificate".
4. Select the Local Machine Store then use the manual option and browse to the "Trusted Root Certification Authorities" store and install it there
5. Run locally the latest agent host package installer or upload it in the console
6. The new agent MSI files will now be available on the "https://ServerName/hostpkg" page inside a ZIP folder

Additional Notes

The 8.9.6 Server contains an updated SHA-1 signing signature required to validate future installation packages of the Windows App Control agent

Related Content

VMware Carbon Black App Control Windows Agent 8.9.0 Release Notes
App Control: Agent Upgrades Failing on Server 2003 and XP