Sign with DigiCert® Click-to-sign
DigiCert Click-to-sign is a DigiCert® KeyLocker client tool that provides Windows customers with a simple UI-based signing workflow that does not require use of the DigiCert® KeyLocker command line interface. After you specify your signing preferences in the DigiCert Click-to-sign installation wizard, you simply need to right-click on a file or folder to sign.
Tip
Click-to-sign does not sign file names with specific characters, review the following:
Supported characters:
@ % ^ ( ) - _ = [ ] { } ;Unsupported characters:
| ` $ > < # ! ' & +.
To avoid errors, remove unsupported characters from file names before attempting to sign.
DigiCert® Click-to-sign relies on Signing Manager Controller (SMCTL) and PKCS#11 library to sign.
Note
These client tools must be stored in the C:\Program Files\DigiCert\DigiCert KeyLocker Tools\ folder to be used by DigiCert Click-to-sign.
Prerequisites
Windows 10 operating system
.NET Framework (version 4.7 or higher)
Download and configure DigiCert® KeyLocker clients
File or folder to be signed
Set PATH environment variable
Operating systems use the environment variable called PATH to determine where executable files are stored on your system. Use the PATH environment variable to store the file path to your DigiCert Keylocker Tools to ensure that the DigiCert® Click-to-sign can reference these tools.
You can set the PATH environment variable to DigiCert Keylocker Tools using command line or environment variables.
To set the path to your signing tools via command line:
Run:
set PATH=%path%;<Path to DigiCert Keylocker Tools folder>
Command sample:
set PATH=%path%;C:\\Program Files\\DigiCert\\DigiCert Keylocker Tools
To verify that the tool has been integrated run the following command in SMCTL:
smctl healthcheck --tools
To set the path to your signing tools for your system or account:
Search for environment variables in the Windows start menu.
Select Edit environment variables for your account or Edit system environment variables.
Double click on the Path variable.
Click New.
Select Browse.
Provide the path to DigiCert Keylocker Tools:
C:\Program Files\DigiCert\DigiCert Keylocker ToolsClick OK to save the path.
Click on OK to close the dialog.
Sign now
To sign immediately using the default settings you selected during the configuration:
Right-click on the file you want to sign.
Select DigiCert® Click-to-sign > Sign now.
Review and sign
To review the file or folder selected for signing and the default settings before signing:
Right-click on the file you want to sign.
Select DigiCert® Click-to-sign > Review and sign.
Review the selected file and default settings.
Select Sign.
Change default settings
To update your default user credentials, signing algorithm, timestamp settings, and certificate:
Right-click on the file.
Select DigiCert® Click-to-sign > Settings.
Change your preferences.
Select Save.