GYTPOL certificate whitelisting
In some cases, whitelisting the specified paths isn't sufficient, and you need to add a vendor's certificate to the EDR. To obtain the certificate file, open the Certificates snap-in in MMC, navigate to Local Machine, and locate the GYTPOL LTD certificate in Trusted Publishers.
Ensure this certificate is whitelisted in your EDR, as well as any executable or process that runs with it.
Here's how to open the Certificates snap-in using the Microsoft Management Console (MMC):
Open the Run dialog:
Press
Windows key + R
on your keyboard.
Launch MMC:
In the Run dialog box, type
mmc
and pressEnter
.
Add the Certificates snap-in:
In the MMC window, click on
File
in the top-left corner, and then selectAdd/Remove Snap-in
.
Select the Certificates snap-in:
In the Add or Remove Snap-ins dialog box, find and select
Certificates
from the list on the left, then clickAdd
.
Choose the appropriate account:
You will be prompted to choose the snap-in to manage certificates for:
Select
Computer account
and clickNext
.Choose
Local computer
(the computer this console is running on), then clickFinish
.
Locate the GYTPOL LTD certificate:
Back in the MMC console, expand
Certificates (Local Computer)
in the left pane.Expand
Trusted Publishers
and then click onCertificates
.Locate the
GYTPOL LTD
certificate in the right pane.
Whitelisting the certificate:
Ensure to whitelist this certificate in your EDR, as well as any executable or process that runs with it.
This will allow you to view and manage certificates on your local machine using MMC.