Tutorials & Guides

Get started with guides and tutorials for trying out and evaluating SignServer and view guides on how to start using code signing.

Get started with SignServer

Get started with a tutorial for trying out and evaluating SignServer.

→ Start SignServer Container with Client Certificate Authenticated Access

Get started with SignServer using Helm

Learn how to deploy SignServer in Kubernetes using our open-source Helm chart.

→ Tutorial - Deploy SignServer using a Helm chart

Try out quantum-safe signing

Try out quantum-safe signing to experiment and prepare for the transition to quantum-safe algorithms.

Quantum-Safe Code Signing

With NIST’s standardization of post-quantum cryptographic algorithms, SignServer supports the NIST-approved ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) algorithms.

This guide demonstrates code signing based on SignServer using the quantum-safe SLH-DSA or ML-DSA algorithms through Bouncy Castle and allows you to try out creating quantum-safe keys and signatures.

→ Post-Quantum Code Signing How-to

Tutorials on Quantum-ready PKI and signing

Learn how to set up your first post-quantum PKI with EJBCA and sign data using SignServer with the NIST-approved quantum-safe algorithm ML-DSA.

→ Tutorial - Create a Post-Quantum PKI using EJBCA

→ Tutorial - SignServer Post-Quantum signing

Get started with container signing

Learn how to use SignServer together with Cosign to create signed container images.

→ SignServer Container Signing with Cosign

Sign Code in GitHub Workflows with GitHub Actions

Learn how to secure your pipeline and build trust in your software supply chain.

→ Tutorial - Sign Code in GitHub Workflows with GitHub Actions and SignServer

Code Signing How-to Guides

How-to guides on setting up SignServer for different code signing use cases.

Code Signing Technical How-to

This technical guide describes the code signing use case and how to start using code signing for signing of executable files, software releases, firmware or other custom formats.

→ Code Signing Technical How-to

Quantum-Safe Code Signing How-to

With NIST’s standardization of post-quantum cryptographic algorithms, SignServer supports the NIST-approved ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) algorithms.

This guide demonstrates code signing based on SignServer using the quantum-safe SLH-DSA or ML-DSA algorithms through Bouncy Castle and allows you to try out creating quantum-safe keys and signatures.

→ Post-Quantum Code Signing How-to

Authenticode Code Signing Technical How-to

A brief guide for the use case SignServer Cloud and Authenticode signing, covering launching SignServer Cloud and trying out code signing using the Microsoft Authenticode digital signature format.

→ Authenticode Code Signing Technical How-to

Jenkins Integration for Automated Code Signing

A guide demonstrating an integration between SignServer and Jenkins for automated code signing in a CI/CD Pipeline. Includes using the SignServer JArchive CMS Signer for JAR signing and running a Jenkins Pipeline building and delivering the app, and using Client Certificate Authentication to authorize Jenkins to sign files in SignServer.

→ How To Integrate Jenkins with SignServer for Automated Code Signing