The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Get the signer distinguished name from Trellix ePO - On-prem to use to exclude executables

Prev Next

The signer distinguished name (SDN) is required when you enable a digital signature check and exclude only files signed by a specified process signer.

Task
  1. Select MenuReportingThreat Event Log.

  2. Click the Adaptive Threat Protection event (Adaptive Threat Protection prefix in the Action Taken field) to display details.

  3. Select and copy the Source Process Signer details.

  4. When creating exclusions, paste the Source Process Signer details as a single line of text to the Signed by field.

    For example, the SDN required format is:

    C=US, S=CALIFORNIA, L=MOUNTAIN VIEW, O=MOZILLA CORPORATION, OU=RELEASE ENGINEERING, CN=MOZILLA CORPORATION