If you try to execute the SSSO tool with ACC enabled, you might observe some denials. We've added the certificate as a trusted publisher to make sure that proper functionality of SSSO is maintained on the systems protected by ACC.
For ePolicy Orchestrator (ePO)-managed systems:
NOTE: Only an ePO administrator must perform the following steps.
Solidcore rules:
- Download and extract the Publisher.xml file that's attached to this article.
- Go to Configuration, Solidcore Rules, and click Import.
- Select the previously extracted Publisher rule groups XML file, select the Overwrite duplicate groups option, and then click OK.
- After the import, examine the server task log and verify whether the import is successful.
- Use an existing (or create a) server task Solidcore: Rule Group Sanity Check, and verify the results.
Application Control Rules (Windows) – Default policies:
If any endpoint has the Default policy assigned, force the policy update on that endpoint using the Wake Up Agents button.
Application Control Rules (Windows) - Custom policy:
If any endpoint has assigned any custom policy that contains the Publisher rule group, force a policy update on that endpoint using the Wake Up Agents button.
If an endpoint has assigned any custom policy, and if the Applications default policy or Publisher rule group isn't assigned to any policy, do the following:
- Download and extract the Publisher rule Trellix Publisher.xml file attached to this article.
- Go to Configuration, Solidcore Rules, and click Import.
- Select the previously extracted Publisher rule groups XML file, select the Overwrite duplicate groups option, and then click OK.
- Add the Publisher rule group to your Custom Policy.
- Apply these policies to the endpoints.
- Install all necessary SSSO prerequisites. For more details, see KB92519 - Self-Service Supportability Orchestrator data collection tool.
For standalone installations of Application Control:
- Download and save the archive file TrellixSSSO.zip that's attached to this article.
- To change Application Control to Update mode, run the following command:
sadmin bu
- Place the certificate file in the folder C:\Program Files\McAfee\Solidcore\Certificates.
- To register the certificate file, run the following command:
sadmin cert add -u "C:\Program Files\McAfee\Solidcore\Certificates\TrellixSSO1631.cer"
- To verify if the certificate files are registered successfully, run the following command:
sadmin cert list
- Install all necessary SSSO prerequisites. For more details, see KB92519 - Self-Service Supportability Orchestrator data collection tool.
- To change Application Control back to Enable mode, run the following command:
sadmin eu
