Signing Manager Controller (SMCTL) provides a Command Line Interface (CLI) that facilitates manual and automated private key management, certificate management, and signing with or without the need for human intervention.
SMCTL comes with a built-in help function and provides instructions on all commands and subcommands to assist users in the CTL tool. See SMCTL command manual.
SMCTL provides secure key generation, application hash signing, and associated certificate-related requirements when the signing request does not require the transportation of files and intellectual property.
To view all SMCTL commands:
smctl --helpor
smctl -h
These subcommands specify the actions you can apply to commands when using SMCTL.
All SMCTL commands begin with:
smctl <subcommand>ショートカット | サブコマンド | 説明 |
|---|---|---|
cert | 証明書を管理します。 | |
creds | OS の資格情報ストアの DigiCert® Software Trust Manager 資格情報を管理します。 | |
GPG鍵ペアとキーリングを管理します。 | ||
View and confirm the validity of the credentials and tools configured. | ||
Manage HSMs mapped to your Software Trust Manager account. | ||
kp | 鍵ペアを管理します。 | |
ログを管理します。 | ||
manual | Signing Managerのコマンドラインインターフェイスの最新の man ページを生成します。デフォルトでは、現在のディレクトリの下の man-pages ディレクトリにマニュアルページファイルが作成されます。 | |
Manage notarizations for Apple binaries. This command is only available on macOS. | ||
rel | リリースを管理します。 | |
sc | Manage scans powered by ReversingLabs. | |
署名、検証、削除を行います。 | ||
ユーザーデータを取得します。 | ||
Windows OS特有のコマンド |
Flags are used to modify the behavior of a subcommand by specifying parameters. Apply these flags to the subcommands above when using SMCTL.
Shortcut | Flag | Description |
|---|---|---|
-v | --version | Version of SMCTL. |
--dir string | Specify the directory to write the man pages. Default is man-pages/. Format: --dir="<value>" | |
-h | --help | Help for SMCTL. |
SMCTL integrates with and enables secure hash-based signing with the following signing tools while maintaining key protection, permission-based access and reporting all signing activities:
Sign in to DigiCert ONE.
Navigate to DigiCert® Software Trust Manager > Resources > Client tool repository.
Select your operating system.
Click the download icon next to Signing Manager Controller (SMCTL).
Follow the instructions in one of the following articles based on the operating system you will use to sign:
To verify that your client can properly authenticate to the DigiCert® Software Trust Manager service:
Open smctl.exe.
Run:
smctl healthcheck
Review the following table to understand how to obtain the latest version of SMCTL and other client tools:
SMCTL or client tools | Sample command |
|---|---|
SMCTL (with auth) | |
SMCTL (without auth) | |
JCE | |