A white list generation apparatus (2000) acquires a generation request (70). The generation request (70) includes hardware configuration information (74) indicating hardware performance of a target virtual machine (20) and software configuration information (72) indicating software to be installed on the target virtual machine (20). The white list generation apparatus (2000) generates or determines a machine (90) configured with hardware with performance higher than hardware performance indicated in the hardware configuration information (74). The white list generation apparatus (2000) further installs software indicated in the software configuration information (72) onto the machine (90). Then, the white list generation apparatus (2000) generates a white list (60), based on a content of a storage apparatus in the machine (90) after completion of the installation.