Comodo Code

Frequently asked questions

• What is a Comodo Code Signing Certificate?

  A Comodo Code Signing Certificate is a digital certificate that lets developers sign software, scripts, and applications to prove authorship and guarantee that the code hasn’t been altered or corrupted.

• Why should I use a Code Signing Certificate?

  It prevents users from seeing "Unknown Publisher" warnings during installs and builds trust by confirming your identity and code integrity.

• Who is it for?

  Software developers

  Application publishers

  Script authors (Java, PowerShell, etc.)

  Organizations distributing software over the web

• Which platforms are supported?

  Windows (.exe, .dll, .cab, .ocx, etc.), Java (.jar), Microsoft Office macros (VBA), Adobe AIR apps, macOS (with EV certificate), Drivers (requires EV for Windows 10+)

• How long does it take to issue?

  Typically 1–3 business days after identity and contact verification.

• What validation is required?

  For individuals: Government-issued ID & phone validation

  For organizations: Business registration, public phone listing, and domain/email verification

• Is there an EV version?

  Yes. Comodo EV Code Signing provides higher trust, required for Windows kernel-mode drivers, and includes hardware-based key storage for enhanced security.

• How do I use the certificate?

  You’ll use tools like:

  signtool.exe for Windows

  jarsigner for Java

  codesign for macOS

  PowerShell or terminal commands for scripting

• What is timestamping and why does it matter?

  Timestamping ensures your code remains trusted even after your certificate expires, as long as the signature was valid at the time of signing.

• Can I use it on multiple machines?

  Yes, for standard Code Signing certificates, you can export the private key and install it on other machines.

  EV certificates must be used on specific hardware tokens (USB or HSM) and are not transferable without it.

• How long is the certificate valid?

  Valid for 1 to 3 years, depending on what you choose.

• Can I renew it?

  Yes. Renew before expiry for a smoother process. If you wait until after expiration, you'll need to repeat the validation process.

• What happens if I lose my private key?

  If you lose the private key or hardware token, the certificate becomes unusable. You’ll need to request a reissue and undergo validation again.

• Does it come with technical support?

  Yes. We provide full technical and installation support.

• Is it secure from misuse?

  Yes – especially with EV certificates that use hardware-based key storage. Keep private keys backed up and secure.

• How is the certificate delivered?

  Standard Code Signing: Provided as a downloadable certificate file

  EV Code Signing: Delivered via USB token (shipped securely to you)

• Can I use it for open-source projects?

  Yes, many open-source developers use Code Signing to add trust to their downloads.