Verifying Virtual Channel Plugin Signatures
For additional security, virtual channel plugins can be signed, and the digital signature can be verified. Before loading a virtual channel plugin, the Anyware agent will verify if the plugin has a valid digital signature and takes action based on the configured signing policy.
The following table describes the verification policies:
| Signature Verification Configuration | Signed Plugin | Unsigned Plugin |
|---|---|---|
| Enabled | Loaded | Not Loaded |
| Enabled, but plugin is in exception list | Loaded | Loaded |
| Disabled | Loaded | Loaded |
Enabling Virtual Channel Plugin Signature Verification
The following parameters have been introduced to control the signature verification:
-
Enable vchan plugin signature verification: This parameter enables the ability of the agent to verify virtual channel plugin digital signatures. -
Vchan plugin signature verification exception list: This parameter allows specific virtual channel plugins to be exempted from the signature verification process.
For more information, see the Configuration Guide.
Verifying the Virtual Channel Plugin Signature
-
In File Explorer, right-click the plugin file and select Properties.
-
Click the Digital Signatures tab.
-
In the Embedded Signatures table, verify if there is at least one digital signature.
-
Select a digital signature in the table and click Details to check its validity.
The following message will be displayed if the verification is successful:
