Blocking certificates, users or custom items

Certificates issued from a certificate authority cannot be revoked in the same way as user certificates based on the username from the server. To prevent users on your system from being able to trust and use specific custom items or items signed by a specific certificate or user, it is possible to add the item, certificate or user to the blocked list. This is done using the block-code-trust command. Blocked items or custom items signed by a blocked certificate or user will never be executed.

About this task

Note: If you select to block a specific custom item (e.g., a mod) then it might still be possible to trust and use an updated version of that mod. Note that any modification will be seen as an update from a trust perspective.

When blocking a certificate or user, none of the items signed by that signer will be possible to use.

When an end user attempts to open an item that has been blocked (either because the signature is blocked, or because that specific item is blocked), the user will be informed that the item is blocked and will be unable to trust and use that item.

Before you begin

For instructions on using commands, see Executing commands on the command line.

Procedure

Open a command prompt as an administrator.
On the command line, enter config (config.sh on Linux) followed by the block-code-trust command and any required parameters:
```
config block-code-trust --serial-number=value --issuer=value
```

Results

The blocked custom item or anything signed by the blocked signer can no longer be used.