Skip to main content

Signing Manager Controller (SMCTL)

Signing Manager Controller (SMCTL) provides a Command Line Interface (CLI) that facilitates manual and automated private key management, certificate management, and signing with or without the need for human intervention.

SMCTL comes with a built-in help function and provides instructions on all commands and subcommands to assist users in the CTL tool. See SMCTL command manual.

SMCTL provides secure key generation, application hash signing, and associated certificate-related requirements when the signing request does not require the transportation of files and intellectual property.

What signing tools can SMCTL integrate with?

SMCTL integrates with and enables secure hash-based signing with the following signing tools while maintaining key protection, permission-based access and reporting all signing activities:

Download SMCTL

  1. Sign in to DigiCert ONE.

  2. Navigate to DigiCert​​®​​ KeyLocker > Resources > Client tool repository.

  3. Select your operating system.

  4. Click the download icon next to Signing Manager Controller (SMCTL).

Set up environment variables

Follow the instructions in one of the following articles based on the operating system you will use to sign:

Verify connection

To verify that your client can properly authenticate to the DigiCert​​®​​ KeyLocker service:

  1. Open smctl.exe.

  2. Run:

    smctl healthcheck

Obtain latest versions of SMCLT and other client tools

Review the following table to understand how to obtain the latest version of SMCLT and other client tools:

Tableau 4.

SMCLT or client tools

Sample command

SMCTL (with auth)

curl -X GET -o C:\test\STM_DL/smtools-windows-x64.msi https://one.digicert.com/signingmanager/api-ui/v1/releases/smtools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%"

SMCTL (without auth)

curl -X GET -o C:\test\STM_DL\smtools-windows-x64.msi https://one.digicert.com/signingmanager/api-ui/v1/releases/noauth/smtools-windows-x64.msi/download

JCE

curl -X GET -o C:\test\STM_DL\client-tools/digicert-jce-1.0.zip https://one.digicert.com/signingmanager/api-ui/v1/releases/noauth/digicert-jce-1.0.zip/download