The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Get the signer distinguished name to specify trusted executables on a client system

Prev Next

The Signer Distinguished Name (SDN) is required when you enable a digital signature check and add only files signed by a specified process signer.

Task
  1. Right-click an executable and select Properties.

  2. On the Digital Signatures tab, select a signer and click Details.

  3. On the General tab, click View Certificate.

  4. On the Details tab, select the Subject field.

    The SDN appears.

    For example, Firefox has this SDN:

    CN = Mozilla Corporation

    OU = Release Engineering

    O = Mozilla Corporation

    L = Mountain View

    S = California

    C = US

    Note

    The SDN fields appear in reverse order from the required format.

  5. Copy the contents of the Subject field to a temporary location.

  6. Edit the information to reverse the order of the elements, remove line breaks, and separate the elements with commas.

    For example, the SDN required format is:

    C=US, S=CALIFORNIA, L=MOUNTAIN VIEW, O=MOZILLA CORPORATION, OU=RELEASE ENGINEERING, CN=MOZILLA CORPORATION

  7. When specifying trusted executables, paste the certificate details to the Signed by field.