Here you can make changes to the security settings for some files.

To use the following settings, you have to have a valid X.509 certificate and its thumbprint. Generic information to those certificates can be found on https://en.wikipedia.org/wiki/X.509. On the server, you need the certificate with its private key.

For clients with UEM Agents up to and including version 2503.2.2 or Empirum up to and including version 25.0.1 (without the corresponding hotfixes), the following is still required: For clients, you need to distribute the public key. How to distribute them via group policies is described on this Microsoft documentation page. The certificate must be stored in one of the stores listed on this Microsoft documentation page

Starting with Empirum version 26.1 (and 25.4 with the latest hotfix installer), the signing time is included in the signature using a time stamping service (Time Stamping Authority, TSA). This means that the signature remains valid even after the certificate has expired, provided that the certificate was valid at the time of signing. By default, the Sectigo time stamping service is used. To do this, the URL http://timestamp.sectigo.com must be accessible from the Empirum service server. (An alternative time stamping service can be specified by changing the "SWDepotTsaUrl" option in the "Options" database table.)

• Sign Software Depot. Activates the signing of the files of the software depot. This includes the PackageHashes.json and the SwDepot.dds.
• Thumbprint. The fingerprint of the certificate to be used. How to retrieve the thumbprint of a is described on this Microsoft documentation page. Spaces are removed when saving.
• Update Agent Template. Pressing this button will update all agent templates which have signature check enabled.