CodeSign Secure Documentation
  • Overview
    • About CodeSign Secure
    • Getting Started
    • Documentation Guide
    • Portal Overview
    • Troubleshooting
      • FAQ
    • Glossary
  • Reference Guide
    • Header Bar
      • CodeSign Secure Documentation
      • Swagger API
      • Profile Section
    • Dashboard
      • Key Performance Indicators
      • Issued Certificates
      • Signatures Generated
      • HSM Health Check
    • Keys and Certificates
      • Key and Certificate Lifecycle
    • App Management
    • Signing Requests
      • Approval Workflows
    • Signing Tools
    • Reports
      • Signing Request Report
      • Audit Trail
      • Certificate Report
      • Client Report
    • Logs
    • System Setup
      • Identity Store
      • Backup
      • User
      • Roles and Permissions
      • Email
      • Signing Projects
      • SSL/TLS Management
      • Environment
      • Plugins
  • Setup & Architecture
    • Identity and Access Control
    • Architecture and Concepts
    • Installation
      • Windows
        • Installing the Server
        • Ports and Protocols
        • High Availability and Backup
        • Upgrades and Compatibility
    • Security
      • Security Hardening Checklist
      • Client Authentication
      • Designing Signing Policies
  • Release Notes
    • Releases for 2026
      • v3.2.1
    • Releases for 2025
      • v3.2.0
    • Releases for 2024
      • v3.1.0
  • API Reference
    • Getting Started
    • Authorizing Requests
    • Securing API Access
    • Request and Response Conventions
    • Endpoint Reference
      • Signing
      • Signing Requests
      • Certificates
      • Applications and Environments
      • User Management
      • Permissions
      • Email
      • System Setup
      • Reports
      • Dashboard
      • License
  • Integration Guides
    • Signing Capabilities
      • Supported Formats and Platforms
      • Timestamping
      • Windows Signing - SignTool
        • Signing
        • Macro Signing
      • Apple Signing
      • AppX & MSIX Signing
      • Visual Studio ClickOnce
      • Jar Signing
      • Sign HLK/HCK using CodeSign Secure
      • NuGet Signing
      • Mage Signing
      • Sign OVA/OVF using Encryption Consulting’s Utility Tool
      • Utility Tool for code signing
      • Container Signing
      • PKCS11 Wrapper
        • APK Signing
        • OpenSSL Signing
        • XML Signing
        • JSign Tool Signing
        • Jarsigner Signing
        • GPG2, Debian & RPM Signing
      • Reproducible Build
        • Automated Hash Validation
        • Reproducible Build Process Flow
        • Pipeline Script Components
        • Hash Validation
    • CI/CD Integration
      • GitHub Actions
      • Jenkins
      • GitLab
      • Azure DevOps
      • TeamCity
      • Bamboo
      • Securing CI/CD Credentials

Signing Tools

Download the CodeSign Secure client tools that let build machines sign with keys held in the HSM.

Select Signing Tools in the portal to open the download page. Filter by operating system with the drop-down at the top left of the table, or search by name at the top right.

Signing Tools section
Which tool to use
ToolRuns onUse it withConfigured withGuide
Encryption Consulting KSPWindowsSignTool, Mage, NuGet, Visual Studio ClickOnce, HLK, jarsigner (Windows-MY)Installer prompts, EC_Client_Auth, EC_Client_Pass,
EC_SSL_VERBOSE (1 or 0)
Registry: ectoken and the installer settings in Computer\HKEY_CURRENT_USER\Software\Encryption Consulting\SigningKSP
Windows Signing
EC KSP for MacmacOScodesignSee the guideApple Signing
PKCS#11 WrapperWindows, Linux, macOSapksigner, jarsigner, JSign, OpenSSL, XML signing, GnuPGec_pkcs11client.ini, EC_INI_FILE_PATHPKCS#11 Wrapper
Utility ToolWindowsInteractive single-file and bulk signing, OVA/OVF, NuGet; optional ClamAV scanBASEURL in the configuration fileUtility Tool
ec-signerContainer build host with Python and Dockercosign container image signingSee the guideContainer Signing
ECGetCert.exeWindowsRetrieves the signing certificate for ClickOnce and pipeline signingSee the guideVisual Studio ClickOnce
Good practice
  • Download tools only from your own CodeSign Secure server’s Signing Tools page, over HTTPS.

  • Use the tools published with your server version, and download them again after every server upgrade.

  • The Sign tools permission controls access to this page. See Roles and Permissions.

On this Page:
Support Privacy Policy Terms of Service

Copyright Encryption Consulting LLC. All rights reserved.