App Control: How to Manually Import TrustedCertList.pem and Keychain.json Files on Agents

[#1]

Environment

• App Control Agent: Version 8.7+
• App Control Server: Version 8.7+

Objective

To manually import the TrustedCertList.pem and/or keychain.json files on an endpoint.

Resolution

 

1. Copy the "TrustedCertList.pem" and/or "Keychain.json" files from the application server directory here: 

   C:\Program Files (x86)\Bit9\Parity Server\hostpkg\

2. Move the files to a folder on the agent system (e.g. C:\Temp)
3. Using the command prompt, instruct the Agent to import the files and run a Health Check:
   • Agent version 8.9.2+:

     cd "C:\Program Files (x86)\Bit9\Parity Agent"
     dascli password EnterGlobalPasswordHere
     dascli importservercertlist "C:\Temp\TrustedCertList.pem"
     dascli importkeychain "C:\Temp\keychain.json"
     dascli healthcheck

   • Agent versions 8.7.x - 8.9.0 :

     cd "C:\Program Files (x86)\Bit9\Parity Agent"
     dascli password EnterGlobalPasswordHere
     dascli tamperprotect 0
     dascli importservercertlist "C:\Temp\TrustedCertList.pem"
     dascli importkeychain "C:\Temp\keychain.json"
     copy /y c:\temp\trustedcertlist.pem "C:\ProgramData\Bit9\Parity Agent"
     copy /y c:\temp\keychain.json "C:\ProgramData\Bit9\Parity Agent"
     dascli tamperprotect 1
     dascli healthcheck

4. Verify there are no Health Check failures related to the Trusted Certificate List or the Keychain.

Additional Notes

• These files should automatically be downloaded by the agents, if not please check this KB
• Agent versions 8.7.x - 8.9.0 require more steps due this this known issue

Related Content

App Control: How to Set a Global CLI Password
App Control: How to Use Dascli Command (Windows)