Commands for managing Application Control
-A is a prefix indicating that the command belongs to the group of commands to manage Application Control.
kess-control --get-app-list
The command outputs a list of applications found on a client device by the Inventory task.
Command syntax
kess-control [-A] --get-app-list [--json]
Arguments and options
--json: output data in JSON format.
kess-control --get-categories
This command outputs a list of created application control categories.
Command syntax
kess-control [-A] --get-categories [--names <category name 1> <category name 2> ... <category name N>] [--file <path to configuration file>] [--json]
Arguments and options
<name of category 1> <name of category 2> ... <name of category N> – names of the categories whose information you want to view. If you want to view information about several categories, specify the names of the categories, separated by a space.
--file <path to configuration file> – full path to the JSON configuration file to which the settings will be output.
--json: output data in JSON format.
kess-control --set-categories
This command lets you create or edit the list of created Application Control categories.
Command syntax
kess-control [-A] --set-categories [--names <name of category 1> <name of category 2> ... <name of category N>] --file <path to configuration file>
Arguments and options
<name of category 1> <name of category 2> ... <name of category N> – names of the categories whose information you want to change. If you want to change information about several categories, specify the names of the categories, separated by a space. If you do not specify a category name, the category will be removed from the list.
--file <path to configuration file> – full path to the configuration file with the category settings.
kess-control --get-settings 21
This command outputs a list of created application control rules.
Command syntax
kess-control --get-settings 21 [--file <path to configuration file>] [--json]
Arguments and options
--file <path to configuration file> – full path to the configuration file to which the settings will be exported.
--json: output data in JSON format.
kess-control --set-settings 21
This command lets you edit the list of created application categories and Application Control rules.
Command syntax
kess-control --get-settings 21 [--file <path to configuration file>] [--json]
Arguments and options
--file <path to configuration file> – full path to the configuration file from which the settings will be imported.
--json – import data from a JSON file.
kess-control --set-to-default 21
This command lets you delete a list of application categories and Application Control rules.
Command syntax
kess-control --set-settings 21 --set-to-default
kess-control ---add-app-control-trust-certificates
This command adds a certificate to Application Control's list of trusted certificates.
Command syntax
kess-control [-A] --add-app-control-trust-certificates <path to certificate>
Arguments and options
<path to certificate> is the path to the certificate file that you want to add (PEM or DER format).
kess-control --remove-app-control-trust-certificates
This command removes a certificate from Application Control's list of trusted certificates.
Command syntax
kess-control [-A] --remove-app-control-trust-certificates < certificate serial number>
kess-control --query-app-control-trust-certificates
This command outputs a list of Application Control's trusted certificates.
Command syntax
kess-control [-A] --query-app-control-trust-certificates