The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Get the signer distinguished name from Trellix ePO - On-prem to use to exclude executables

Prev Next

The signer distinguished name (SDN) is required when you enable a digital signature check and exclude only files signed by a specified process signer.

Task
  1. Select Menu → Reporting → Threat Event Log.

  2. Click the Endpoint Security event to display details.

  3. Select and copy the Source Process Signer details.

  4. When creating exclusions, paste the Source Process Signer details as a single line of text to the Signed by field.

    For example, the SDN required format is:

    C=US, S=CALIFORNIA, L=MOUNTAIN VIEW, O=MOZILLA CORPORATION, OU=RELEASE ENGINEERING, CN=MOZILLA CORPORATION