AnsweredAssumed Answered

Does anyone know if the Snow agent binaries are/should all be signed?

Question asked by gert-jan.kosterman@dllgroup.com Advocate on Nov 7, 2018

We notice that some of the Windows Snow agent binaries but certainly not all are signed. Which given the fact the Snow agent service is running with the highest privilege (local system) is posing a security risk if someone is tampering the binaries...

We also notice signing differences for the different agent versions which is strange anyway:

 

Snow Windows 3.7.05 signing issues

 

Snow Windows 3.7.5 signing issues

 

Snow Windows 5.3.0 signing issues

Snow Windows 5.3.0 signing issues

Snow Windows 6.0.2 signing issues

Snow Windows 6.0.2 signing issues

 

Updated 11/20/2018:

 

I created a Snow Support ticket for this too and the answer is: The Snow Inventory Agent version 5.x & 6.x are not signed per default, but is something that can be done on a request basis.

Outcomes