Antivirus and EDR
Files and folders
This page is for the administrator writing path and signer allow-lists. Allow signed code from Computle Limited under C:\Program Files\Computle\Remotle\.
Signing
Section titled “Signing”| What | Signed by |
|---|---|
| Every executable and DLL | Computle Limited (Authenticode). The host updater refuses a file with any other signer, so an unsigned or re-signed file never reaches the install folder through an update. |
| The four drivers | Microsoft, through Windows Hardware attestation signing |
| The installers | Computle Limited |
Folders
Section titled “Folders”| Folder | Contents | Permissions |
|---|---|---|
C:\Program Files\Computle\Remotle\bin\ | Executables | Standard Program Files |
C:\Program Files\Computle\Remotle\lib\ | DLLs, including the camera components and the credential provider | Standard Program Files |
C:\Program Files\Computle\Remotle\drivers\ | Driver packages, one folder each | Standard Program Files |
C:\Program Files\Computle\Remotle\licenses\ | Third-party licence texts | Standard Program Files |
C:\ProgramData\Computle\Remotle\ | Status files, saved stream settings, staged updates and, when turned on, log files | SYSTEM and administrators full control; Local Service modify; users read Logs and Status |
C:\ProgramData\Computle\Remotle\Update\ | Staged and verified updates, previous version for rollback | SYSTEM and administrators only |
C:\ProgramData\Computle\Broker\ | The workstation’s certificate, private key and trust roots | SYSTEM and administrators, read for the session server |
C:\ProgramData\Computle\CrashDumps\ | Minidumps of host processes, newest five per program | SYSTEM and administrators only |
During install, repair and uninstall only, the setup script host-setup.ps1, the devcon tool and Computle’s trust roots are unpacked to a temporary folder and removed when the step ends.
The installer removes any symbolic link or junction it finds at these paths before setting permissions.
The workstation’s certificate is issued by Computle’s private certificate authority, is valid for 30 days and is renewed at day 20 with a fresh key. Where the workstation has a TPM, the key is held in it.
Signing
Section titled “Signing”The Linux packages are not signed. The host updater verifies a package before installing it with the release manifest’s signature, three independent witnesses and the package’s SHA-256; see How updates work.
| Path | Contents |
|---|---|
/usr/lib/computle-host/ | computle-hostd, computle-host-updated, computle-login, computle-greeter-logon, computle-cursor-setup, bundled libraries under lib/ |
/usr/bin/computle-session | The session agent |
/usr/lib/computle/computle-usb-attach | Attaches the client’s USB devices |
/usr/lib/computle-enrolment/ComputleEnrolment | The host’s identity with Computle |
/etc/computle/ | Configuration |
/var/lib/computle/ | State, certificates under broker/ |
/var/log/computle/ | Local logs, when turned on |
pam_computle_logon.so in the PAM module directory, /etc/pam.d/computle-logon | Silent logon |
/usr/share/gnome-shell/extensions/[email protected] | A GNOME Shell extension for the pointer |
/usr/lib/systemd/system/, /usr/lib/systemd/user/ | Units |
/usr/lib/udev/rules.d/, /usr/lib/modules-load.d/, /usr/lib/modprobe.d/ | Module and device rules |
/usr/share/polkit-1/rules.d/ | The clock rule |