Skip to main content

Compatible signing tools and file types

DigiCert​​®​​ Software Trust Manager offers simplified signing solutions via Signing Manager Controller (SMCTL) a command-line interface (CLI) and DigiCert® Click-to-sign a graphic user interface (GUI).

You can also sign directly with the following signing tools. DigiCert signing tools can integrate and enable signing with various third-party signing tools.

Signing tool

Required cryptographic library

Operating system

Can sign

jSign

PKCS11

All

  • .appx

  • .appxbundle

  • .arx

  • .cab

  • .cat

  • .cbx

  • .cpl

  • .crx

  • .dbx

  • .deploy

  • .dll

  • .drx

  • .efi

  • .exe

  • .js

  • .msi

  • .msix

  • .msixbundle

  • .msm

  • .msp

  • .ocx

  • .ps1

  • .psm1

  • .stl

  • .sys

  • .vbs

  • .wsf

  • .xlsm

  • .xsn

Jarsigner

One of the following:

  • JCE

  • PKCS11

  • KSP

All

  • .ear

  • .jar

  • .sar

  • .war

Xmlsectool

PKCS11

All

  • .xml

Apksigner

PKCS11

Windows and Linux

  • .aab

  • .apk

Mender-artifact

PKCS11

Linux and macOS

  • artifact.mender

SignTool (64-bit)

One of the following:

  • KSP

  • CSP

Windows

  • .appx

  • .appxbundle

  • .arx

  • .cab

  • .cat

  • .cbx

  • .cpl

  • .crx (only MS-DOS EXE package format)

  • .dbx

  • .deploy

  • .dll

  • .drx

  • .efi

  • .exe

  • .js

  • .msi

  • msix

  • .msixbundle

  • .msm

  • .msp

  • .ocx

  • .ps1

  • .psm1

  • .stl

  • .sys

  • .vbs

  • .vsix

  • .wsf

  • .xsn

SignTool (32-bit)

One of the following:

  • KSP

  • CSP

Windows

  • .doc

  • .docm

  • .dot

  • .dotm

  • .msi

  • .cab

  • .exe

  • .dll

  • .mpp

  • .mpt

  • .pot

  • .potm

  • .ppa

  • .ppam

  • .pps

  • .ppsm

  • .ppt

  • .pptm

  • .pub

  • .vdw*

  • .vdx*

  • .vsd*

  • .vsdm

  • .vss*

  • .vssm

  • .vst*

  • .vstm

  • .vsx*

  • .vtx*

  • .wiz*

  • .xla

  • .xlam

  • .xls

  • .xlsb

  • .xlsm

  • .xlt

  • .xltm

Mage

KSP

Windows

  • .application

  • .manifest

  • .vsto

Visual Studio (IDE)

KSP

Windows

Signtool 32:

  • .msi

  • .cab

  • .exe

  • .dll

  • .xla

  • .xlam

  • .xls

  • .xlsb

  • .xlsm

  • .xlt

  • .xltm

Signtool 64:

  • .appx

  • .appxbundle

  • .cab

  • .cat

  • .dll

  • .exe

  • .msi

  • .msix

  • .msixbundle

  • .ocx

  • .ps1

  • .psm1

  • .sys

  • .vbs

  • .vsix

  • .xsn

Nuget:

  • .nupkg

Mage:

  • .application

  • .manifest

  • .vsto

NuGet

KSP

Windows

  • .nupkg

HLK

KSP

Windows

  • .hlk

  • .hck

  • .hlkx

  • .hckx

Electron builder (IDE)

One of the following:

  • PKCS11

  • KSP

Windows

  • .exe

  • .msi

Osslsigncode

PKCS11

Linux

  • .exe

  • .dll

  • .sys

  • .msi

  • .msp

  • .msm

  • .ocx

  • .cpl

  • .arx

  • .cbx

  • .dbx

  • .crx

  • .drx

  • .deploy

Sign4j

PKCS11

Linux

  • .exe

CoSign (Sigstore)

PKCS11

Linux

  • Container images

Podman

GPG Smartcard Daemon (SCD)

All

  • Container images

Docker Notary

PKCS11

Linux

  • Container images

dpkg

GPG Smartcard Daemon (SCD)

Linux (Debian)

  • .deb

Esptool from Espressif

PKCS11

Linux

  • .bin

OpenSSL and Esptool from Espressif

PKCS11

Linux

  • .bin

ovftool

PKCS11

Linux

  • .ovf

  • .ova

RPM

GPG Smartcard Daemon (SCD)

Linux (Fedora)

  • .rpm

productsign

CryptoTokenKit (CTK)

macOS

  • .pkg

codesign

CryptoTokenKit (CTK)

macOS

  • .app

  • .dmg

In this section: