Signing an unsigned module

Using only signed modules provides some assurance that the code came from a trusted source, reduces the risk of installing malicious code, and complies with module signing requirements. For example, in Niagara if you attempt to install an unsigned module it will cause a signature verification warning.

  • You are running latest version of Niagara Workbench.

  • You have already created a code signing certificate. For details, see Niagara Station Security Guide).

  1. In Workbench, click Tools > Jar Signer Tool to open the Jar Signer window.
  2. Beside the field labeled Select a jar to sign, click the folder icon to the right.
  3. In the file chooser window navigate to the unsigned jar file and click to select it, and click OK.
  4. In the Alias field, click and select your code signing certificate.
  5. Enter the Certificate Password.
  6. Enter a TSA URL (or use the default URL) and click OK.
    The Save signed jar as window opens prompting you to select a destination location for the signed jar.
    Note: You can save the file anywhere, but if you intend to use it in the current installation, it has to eventually go into the !modules folder.
  7. Navigate to the desired location and click Save.
The signed jar is saved to the specified location. A confirmation window indicates signing is complete.