Code signing and whitelisting (Mac)

Watchman Monitoring signs the code contained with in the Monitoring Client. This article details what code signing and whitelisting means to you, and addressing validation and whitelisting of the Monitoring Client.

Code-signing is the standardized process of using public key infrastructure (PKI) to digitally sign compiled code to ensure a trusted origin, and that the deployed code has not been modified. It is intended to provide a guarantee that the code you are installing does, indeed, come from who it says it comes (Watchman Monitoring) and that it is bona fide.

Contact Menu application

Contained with the Monitoring Client is the Contact Menu. The contact menu is an optional component that can be enabled and controlled from your Dashboard.

The Contact Menu application is located at the following path:

/Library/MonitoringClient/Utilities/ContactMenu.app

The Contact Menu application has the following bundle ID.:

com.monitoringclient.cmhelperd

Whitelisting with Santa

santactl fileinfo /Library/MonitoringClient/Utilities/ContactMenu.app --key "Signing Chain"

santactl rule --whitelist --certificate --sha256 ###hash###

Still stuck?

Email [email protected] and a human will read it, or ask the community.

Last updated .