Deploy App Control Policy

Deploy App Control Policy

Use this AppControl Manager page to select XML policy files or .cip binary files to deploy on the system.

Configuration Details for Unsigned Deployment

• Select XML Policy File(s): Use this button to browse for App Control XML policy files.

• Select CIP Binary File(s): Use this button to browse for App Control CIP binary files.

• Deploy: Use this button to deploy all of the XML and CIP files you selected on the system.

Configuration Details for Signed Deployment

When signing and deploying App Control Policies, a dialog will be displayed asking for additional information required for signing the policy.

• Certificate File: Provide the path to the certificate .cer file. It must be a code signing certificate that is either issued by a public certificate authority (CA) or a self-signed certificate. You can generate a self-signed certificate suitable for App Control policy signing in the certificate building page of the AppControl Manager. The certificate's details will be added to the XML policy as signers. The certificate must exist in the Personal store of the Current User certificate stores with private key.

• Certificate Common Name: The Common Name (CN) of the same certificate file you select.

• SignTool Path: The path to the SignTool.exe. If you don't have it, you can toggle the Auto Acquire switch. Auto Acquire will try to first find it on the system by checking for installed Windows SDK, if it cannot find it, it will download it from the official Microsoft server.

Once you've provided all 3 items, press the Verify button. It will verify your inputs and then the Submit button will be enabled, allowing you to proceed with policy signing and deployment.

All of the information you submit will be saved in app settings so that the next time they will be automatically populated for you.