Integration > PKCS11 Jarsigner Signing
PKCS11 Jarsigner Signing
Java Archive (.jar) files can be signed with the JDK’s Jarsigner tool using a PKCS11-type keystore, so the signing keys never leave the backing hardware.
Use Cases
Sign JAR files as part of a release process using HSM-backed keys and native JDK tooling.
PKCS11 Keystore
Configures a PKCS11-type keystore so Jarsigner reaches HSM-held keys directly.
Native Tooling
Uses JDK’s built-in Jarsigner tool without an additional signing utility.
Cross-Platform Setup
Supports Linux (Ubuntu), macOS, and Windows build environments.
Integrations and Resources
CodeSign Secure
PKCS11 Jarsigner Signing
Signs JAR files with JDK’s Jarsigner using a PKCS11-backed keystore.