Code Signing Certificates

Code Signing certificates can be used to digitally sign a program (an executable or a script) to guarantee the identity of the author of the software, and to ensure that the software has not been changed after it was signed.

Who can request a Code Signing Certificate

Any CERN user can request a Code Signing Certificate.

How to Request a Code Signing Certificate

To request a Code Signing Certificate, you must

• Create a Service Account with a meaningful display name (e.g. "IT/OIS Software"). The display name of the account will be used as subject of the certificate.
• Log in with that account and obtain the permission to request Code Signing certificates.
• Request a new Code Signing certificate

Specific instructions for code signing

The software signing process varies according to the technology used.

• How to Sign a PowerShell script
• How to Sign Office Macros

Please help us improve this section!

If you would like to contribute with instructions on how to sign software in a specific environment or using specific tools, please write to cern-ca-managers@cern.ch, and we will add your contribution to a future version of the help files.