Hello,
I'm trying to implement Posture using Secure Client module in latest version. As there is no automatic remediation to force the update of our anti-malware solution, I wanted to test a power shell script.
So I created a .ps1, signed with a code-signing certificate issued by our internal PKI.
I pushed the code signing certificate to trusted publisher store on my client.
I added SHA256 fingerprint on AnyconnectLocalPolicy.xml and rebooted my client. (I included fingerprint of our internal root CA and intermediate, along witht the fingerprint of the admin certificate of the PSN, at the end I even added the code-signing certficate fingerprint...)
I can see in the packets that the client is connecting to PSN on port 8905, the TLS handshake is ok.
But I got an error in the remediation, that it didn't work. Exploring the ISEPosture.txt from DART, I can find errors relative to integrity :
" Public key in configuration is empty. Cannot verify data integrity"
" Data Integrity check failed"
"public key not found"
My .ps1 file looks like :
C:\.....\antimalware.exe -task 2
# SIG # Begin signature block
# signature data
# SIG # End signature block
What am I missing, why the script check is not working ? I event changed the Windows PowerShell execution policy to "bypass" in the remediation script configuration.
