You can use certificate-related alerts to help plan and manage security enforcement.
The following alerts are available:
- New Certificate Alert
- Alerts subscribers when a file with a certificate for a publisher not previously listed on this server is discovered, and when a new certificate is imported directly into the Carbon Black App Control Server. By default, this alert is triggered when a new certificate for any publisher is detected. However, it can be configured to trigger only for new certificates for specific publishers.
- Revoked Certificate Alert
- Alerts subscribers when a certificate known to this Carbon Black App Control Server is revoked. By default, this alert is triggered when a certificate for any publisher is revoked. However, it can be configured to trigger only for specific publishers.
There is a special mail template for informing users about certificate discovery or revocation.
See Using App Control Alerts for more information about configuring, enabling, and responding to alerts.