IBM Support

Windows Code Signing Certificate Change Impact When Advanced App Compliance Is Configured In Security Policies

Troubleshooting


Problem

The MaaS360 Windows Core and Secure Browser applications are blocked from use when the security policy enforces an Allowlist with the changes made in version 4.61.

Symptom

MaaS360 Windows Core and Secure Browser applications are blocked from use.

Cause

The publisher name used for the Secure Browser and Core application changed from IBM to International Business Machines Corporation. Due to this publisher name change, customers who enforce an Allowlist must update their policy to include the new publisher name so MaaS360 Secure Browser and Core application can function correctly.

Environment

All instances

Diagnosing The Problem

If the MaaS360 Windows Core and Secure Browser application no longer function.

Resolving The Problem

The following changes in the Windows security policy are required for the Core and Secure Browser application to update.
  1. Navigate to Security -> Policies and view the affected Windows policy.
  2. Navigate to Policy -> Device Settings -> Advanced App Compliance -> Universal Apps -> Configure App Blocklist and Allowlist. Click edit in the upper right.
  3. Add the following information to the existing Allowlist.
    Action: AllowList(Allow)
    Publisher Name: CN=International Business Machines Corporation, OU=IBM CCSS, O=International Business Machines Corporation, L=Armonk, S=New York, C=US
  4. Review the changes and publish the policy
    Note: Publish the policy on or after 13 October 2022
Advanced App Compliance Allowlist Configuration Screenshot

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"ARM Category":[{"code":"a8m0z000000GnQJAA0","label":"TROUBLESHOOTING"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
12 October 2022

UID

ibm16828551