Site icon SSL.com

How to Digitally Sign .app Files using eSigner CKA

A .app file is essentially a macOS application bundle. It’s a directory that contains all the necessary files for a macOS application to run, such as executable binaries, property list (plist) files, resources, and libraries. Despite appearing as a single file on macOS, it is actually a folder with a structured format, which allows applications to bundle their executables along with related resources like images, localizations, and configuration files.

The .app bundle is typically accessed through the Finder interface as a single application icon, but you can view its contents by right-clicking the icon and selecting “Show Package Contents.” This structure helps keep application-related files organized and encapsulated, making installation, execution, and removal straightforward.

eSigner CKA (Cloud Key Adapter) is a Windows application utilizing the CNG interface (KSP Key Service Provider) to enable tools like certutil.exe and signtool.exe to access the eSigner Cloud Signature Consortium (CSC) API for enterprise-level code signing. It functions as a virtual USB token, loading code signing certificates into the Windows certificate store.

Requirements

  1. Purchase an SSL.com Code Signing Certificate or Extended Validation (EV) Code Signing Certificate
  2. Enroll your code signing certificate in eSigner
  3. Download and install eSigner CKA

Steps to Sign

  1. Download Dynamics.365.BC.55195.US.DVD.zip at https://www.microsoft.com/en-US/download/details.aspx?id=105113
    Note: If you attempt to sign a .app file using eSigner CKA without first installing Microsoft Dynamics 365 Business Central application, you will get this SignTool error: This file format cannot be signed because it is not recognized.
  2. Open the Dynamics.365.BC.55195.US.DVD.zip and extract the contents to your preferred location.
  3. Open setup.exe for Microsoft Dynamics 365 Business Central and click the Next > button.
  4. Read the Microsoft Software License Terms and then click the I accept > button.
  5. Choose Advanced installation options
  6. Click Choose an installation option.
  7. Choose the Server installation option.
  8. Click the Apply buton.
  9. Wait for the installation to be completed. Upon successful installation, click the Close button.

Sign your .app file on SignTool: https://www.ssl.com/how-to/automate-ev-code-signing-with-signtool-or-certutil-esigner/#components-of-the-command-line

If you have questions related to PKI and digital certificates, please contact us by email at Support@SSL.com, call 1-SSL-Certificate (1-775-237-8434), or simply click the chat button at the bottom right of this page. As always, thank you for choosing SSL.com!
Exit mobile version