The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Get the signer distinguished name from ePO - On-prem to use to exclude executables

  • Published on Sep 14, 2026
  • 1 minute(s) read
Prev Next

The signer distinguished name (SDN) is required when you enable a digital signature check and exclude only files signed by a specified process signer.

Task

  1. Select Menu → Reporting → Threat Event Log.

  2. Click the Trellix ENS event to display details.

  3. Select and copy the Source Process Signer details.

  4. When creating exclusions, paste the Source Process Signer details as a single line of text to the Signed by field.

    For example, the SDN required format is:

    C=US, S=CALIFORNIA, L=MOUNTAIN VIEW, O=MOZILLA CORPORATION, OU=RELEASE ENGINEERING, CN=MOZILLA CORPORATION

Related articles