|
1 | 1 | ---
|
2 | 2 | title: Sign your app for Smart App Control compliance
|
3 |
| -description: How to sign your code to ensure Smart App Control compliance |
4 |
| -ms.topic: article |
| 3 | +description: Learn how to sign your code to ensure Smart App Control compliance using one of several supported methods. |
| 4 | +ms.topic: concept-article |
5 | 5 | ms.date: 09/20/2022
|
| 6 | +# customer intent: As a Windows developer, I want to learn how to sign my code to ensure Smart App Control compliance. |
6 | 7 | ---
|
7 | 8 |
|
8 | 9 | # Sign your app for Smart App Control compliance
|
9 | 10 |
|
10 | 11 | Code signing is a cryptographic operation that can be performed on an app in order to verify its contents and publisher. Smart App Control considers apps signed with a trusted digital certificate to be safe, and allows them to run on a protected computer.
|
11 | 12 |
|
| 13 | +> [!NOTE] |
| 14 | +> Smart App Control's signature check does not currently support Elliptic-curve cryptography (ECC) signatures. |
| 15 | +
|
12 | 16 | There are several ways to sign your app.
|
13 | 17 |
|
14 | 18 | ## Obtain a code signing certificate from a trusted provider
|
15 | 19 |
|
16 |
| -Code can be signed with any certificate, but Smart App Control only considers certificates issued by trusted providers. For information about how to obtain a code signing certificate from a trusted provider, see [Manage code signing certificates](/windows-hardware/drivers/dashboard/code-signing-cert-manage#get-or-renew-a-code-signing-certificate) |
| 20 | +Code can be signed with any certificate, but Smart App Control only considers certificates issued by trusted providers. For information about how to obtain a code signing certificate from a trusted provider, see [Manage code signing certificates](/windows-hardware/drivers/dashboard/code-signing-cert-manage#get-or-renew-a-code-signing-certificate). |
17 | 21 |
|
18 | 22 | ## Sign your app with Trusted Signing
|
19 | 23 |
|
20 | 24 | [Trusted Signing](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/trusted-signing-is-in-public-preview/ba-p/4103457) (formerly Azure Code Signing) is the preferred way to sign your app. Trusted Signing is currently in public preview.
|
21 | 25 |
|
22 | 26 | ## Sign your app with signtool.exe
|
23 | 27 |
|
24 |
| -Signtool.exe is an app included with Visual Studio that can sign apps with a digital certificate. For instructions on how to sign your app with signtool.exe, see [How to sign an app package using SignTool](/windows/win32/appxpkg/how-to-sign-a-package-using-signtool) |
| 28 | +Signtool.exe is an app included with Visual Studio that can sign apps with a digital certificate. For instructions on how to sign your app with signtool.exe, see [How to sign an app package using SignTool](/windows/win32/appxpkg/how-to-sign-a-package-using-signtool). |
| 29 | + |
| 30 | +## Related content |
| 31 | + |
| 32 | +- [Manage code signing certificates](/windows-hardware/drivers/dashboard/code-signing-cert-manage#get-or-renew-a-code-signing-certificate) |
| 33 | +- [Trusted Signing](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/trusted-signing-is-in-public-preview/ba-p/4103457) |
| 34 | +- [SignTool](/windows/win32/seccrypto/signtool) |
0 commit comments