Code Signing with kSign
kSign is a free, lightweight Windows GUI tool for code signing. No command line needed. Select your certificate, choose files, click Sign. Perfect for developers who want a visual, straightforward signing workflow.
Works with USB tokens and the Windows certificate store. kSign is from K Software and is free for both commercial and personal use.
What is kSign?
kSign is a free Windows application from K Software ↗ that provides a graphical user interface for Authenticode code signing. It wraps the Windows signing APIs in a simple GUI.
Download, install, select your certificate from the Windows certificate store or USB token, choose the files you want to sign, and click Sign. kSign supports SHA-256 signatures and RFC 3161 timestamping.
Since June 2023, all Code Signing certificates (OV and EV) require HSM-backed key storage. In practice, this means your private key sits on a USB token or in a cloud HSM. kSign works with USB tokens via the Windows certificate store.
When is kSign the right choice?
kSign is the right tool when:
- You prefer GUI over command line
- You sign files manually (not automated CI/CD)
- You use a USB token and want a visual tool
- You are new to code signing and want an easy start
kSign is not suited for: CI/CD pipelines (use signtool or Jsign), cloud HSM signing (use AzureSignTool or Jsign), or Linux/macOS (kSign is Windows only).
Installation and usage
Download kSign from K Software (free)
Get the installer from k-software.com ↗
Install on Windows
Run the installer. No special requirements.
Insert your USB token
Or make sure your certificate is in the Windows certificate store. The SafeNet driver must be installed for USB tokens.
Open kSign and select certificate
kSign displays certificates from the Windows certificate store. Select your Code Signing certificate.
Add files to sign
Select .exe, .dll, .msi and other Authenticode-compatible file types.
Configure timestamp server
Use http://timestamp.digicert.com as the RFC 3161 timestamp URL. Timestamping ensures that the signature remains valid after the certificate expires.
Click Sign
kSign signs the selected files with your certificate. Done.
kSign vs signtool.exe vs Jsign
| kSign | signtool.exe | Jsign | |
|---|---|---|---|
| Interface | GUI (no command line) | Command line | Command line |
| Platform | Windows only | Windows only | Windows, macOS, Linux |
| Key storage | USB token + local cert store | USB token + local cert store | All key stores (USB, cloud HSM) |
| Automation | Manual signing | Scriptable / CI/CD | Scriptable / CI/CD |
| Price | Free | Free (Windows SDK) | Free (open source) |
Supported file types
kSign supports all Authenticode-compatible file formats. For Office macro signing (.xlsm, .docm, .pptm), see our Office macro signing guide.
Related signing tools: SignTool / AzureSignTool | Jsign | kSign | Compare all →
Code Signing certificates for kSign
OV Code Signing
DigiCert CodeSign OV
DigiCert OV Code Signing. Works with kSign GUI.
GlobalSign CodeSign
GlobalSign OV Code Signing. Works with kSign GUI.
EV Code Signing
Frequently asked questions about kSign
Find answers to the most common questions about SSL certificates and FairSSL.
Ready to sign with kSign?
Create a free account and issue your first certificate in under 10 minutes.