NuGet
NuGet is a Command Line Interface (CLI) that provides functionality to install, create, publish, and manage packages without making any changes to project files.
Integrate nuget.exe with Signing Manager Controller (SMCTL) for simplified signing. Alternatively, you can sign directly with NuGet and reference your private key stored in Software Trust Manager.
Tip
NuGet is only compatible for signing on Windows.
What can NuGet be used to sign?
Use NuGet to sign .nupkg files.
Download NuGet
Select one of the following methods to download NuGet. The Windows Software Development Kit (SDK) is a bigger file but contains Nuget, SignTool, and Mage which you may find useful to sign different file types.
Set PATH environment variable
Operating systems use the environment variable called PATH to determine where executable files are stored on your system. Use the PATH environment variable to store the file path to your signing tools to ensure that the CLI can reference these signing tools.
You can set the PATH environment variable to the folder that contains nuget.exe using command line or environment variables.
To set the path to your signing tools via command line:
set PATH=%path%;<path to signing tool folder>
Command sample:
set PATH=%path%,C:\Program Files (x86)\
To set the path to your signing tools for your system or account:
Search for environment variables in the Windows start menu.
Select Edit environment variables for your account or Edit system environment variables.
Double click on the Path variable.
Click New.
Select Browse.
Select the path to the signing tool.
Example: C:\Program Files (x86)\Nuget
Click OK to save the path.
Click on OK to close the dialog.
Download and register KSP library
NuGet integrates with Software Trust Manager KSP library to sign.
Follow these instructions to download and register Software Trust Manager KSP library.
Sign with NuGet
You can sign with NuGet directly or via DigiCert's signing tools integrated with NuGet: