App Control: File Blocked Due To IneligibleForAppoval: SignatureError[0x800B0100]

[#1]

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Symptoms

• Files that should be approved by publisher are showing as blocked in the Console.
• The Block Events include the Description:

  (IneligibleForApproval: SignatureError[0x800B0100])

Cause

The Agent relies on the Windows Cryptographic API to validate the certificates on files, and Microsoft defines Signature Error 0x800B0100 as

TRUST_E_NOSIGNATURE: The app package is unsigned.

Resolution

Publisher Approvals will not work with file failing due to this Signature Error. The only options would be to either:

• Obtain a correctly signed file from the software vendor. 
• Use an alternative Approval Method for this file (Global Approval, Custom Rule, etcetera)

Related Content

How to troubleshoot app package signature errors - Win32 apps