4.60.2

OCTOBER 2025

Signum 4.60.2 has been released to the Keyfactor Customer Portal where upgrades can be scheduled when they are convenient.

Highlights

MacOS Agent

Signum 4.60.2 comes with a new Agent type installable on MacOS and can be used to sign Apple binaries using native signing tools. This new Agent also comes with support for both Signum and SignServer, making it useable by both Signum SaaS and SignServer EE customers.

Signum-util

In this release of Signum we have begun to standardize the CLI tools being used across the agents with both the MacOS and Linux/Container Agent now using ‘signum-util’ for configuring the clients. In addition to being able to use the same commands across platforms there are new features for listing certificates, interacting with the service and more feedback for an improved developer experience.

Announcements

Deprecations

Agent versions before 3.73.1, released in Q4 2023, are deprecated as of this 4.60.2 release and will no longer function after updating to 4.60.2 . The agent versions can be checked in the System>Agents section of the Admin Web Console.

CLI Tool Change

The Linux/Container Agent will no longer use ‘keyfactor-setup’ as the configuration utility. Scripted installs of the agent will need to be updated to account for this. Making this change now will allow for standardizing the tool used across deployment types ensuring a consistent experience and reduced effort across different deployment types.

Security

We have updated the libraries to address CVE-2025-55315 for the Windows Agent where that service was available on localhost.

Features

SD-786 Use CommandLineParser in signum-util tool to parse arguments

SD-544 Add a list available certificates option to the cli tool for Mac/Container/Linux Agents.

SD-701 MacAgent works with Signum & SignServer EE

Improvements

SD-794 Edit signum-util key shortcuts

SD-796 Change autogenerated certificate id to make sure are unique

SD-819 Update installer license agreement

SD-827 signum-util test and setup feeback when there's an error with the credentials.

SD-777 Implement the Signum interface part for MacAgent

SD-811 Make the signum-util tool able to return data in JSON format.

Bug Fixes

SD-783 CSR List not loading when language is not english

SD-818 signing tool hangs trying to use a certificate that is not in service cache

Windows Agent

SD-843 Update libraries to address CVE-2025-55315 that is only accessible over localhost.

macOS Agent

A ClientID is not needed when using the MacOS Agents.  

SD-748 Implement support for macOS Keychain

Linux Agent

The utility used by the Linux Agent has changed to signum-util in 4.60.2. Scripted installs will need to be updated.

A ClientID is no longer required when configuring the 4.60.2 and later Linux Agents.  

SD-733 LinuxAgent - Send process to server when listing Certificates.

Container Agent

A ClientID is no longer required when configuring the 4.60.2 and later Container Agents.  

The Container Agent now uses the same signum-util tool as the macOS and Linux agents.