Note:

We take the security of SignServer and the trust of our users seriously. If you believe you have identified a security vulnerability in SignServer, please report it responsibly by contacting us at security@primekey.com.

SignServer Community Edition is not intended for production use. For production signing deployments, use the Keyfactor SignServer Enterprise Edition or Keyfactor Signum.

SignServer is a signing solution for digitally signing code, documents, and artifacts while keeping signing keys secure and signing workflows auditable. It is platform-independent and supports centralized, policy-driven signing operations.

SignServer is developed in Java and runs on a JVM such as OpenJDK, available on most platforms, such as Linux and Windows.

There are two versions of SignServer:

• SignServer Community (SignServer CE)

SignServer Community Edition is an LGPL-licensed open-source subset of SignServer Enterprise, certified by the Open Source Initiative, and designed for learning, testing, and prototyping signing workflows for code, documents, and artifacts.

SignServer CE is not intended for production use, as production signing environments typically require security certifications, advanced key protection, auditability, SLAs, support, and operational assurances available in SignServer Enterprise.

• SignServer Enterprise (SignServer EE)

SignServer Enterprise Edition is designed for production signing environments, offering advanced signing features, enterprise-grade key management, auditability, compliance capabilities, and commercial support with SLAs.

Learn more about the differences between SignServer CE and SignServer EE: SignServer Community vs Enterprise

• Deploy from source: Clone signserver-ce or download our latest binary distribution, and install it, see SignServer Installation
• Run as a Container: Docker Hub
• Use Helm for automation: Artifact Hub

• Run a 30-day free trial of SignServer Enterprise in a ready-to-use environment, no installation or setup required: Keyfactor Test Drives
• Get in Contact: Request a Demo

SignServer Community is open source and community-supported; there is no support SLA, but a helpful best-effort community is available.

• To report a problem or suggest a new feature, use the Issues tab.
• If you want to contribute to the project, see our Contributing guidelines.
• If you want to contribute actual bug fixes or proposed enhancements, use the Pull requests tab.
• If you need guidance, ask the community for support: SignServer Discussions.
• Learn more in our documentation: SignServer Documentation.
• Get hands-on with our guides: How-To Guides
• See release information: SignServer Release Information.
• Read more on the open source project website: SignServer website.
• Learn more about the differences between Community and Enterprise: SignServer Community vs Enterprise.

SignServer Enterprise is a licensed software backed by professional support services. Get in contact to learn more: Contact us.

SignServer Community is licensed under the LGPL license, please see LICENSE.

• Keyfactor/ansible-ejbca-signserver-playbooks
• Helm deployment via Artifact Hub
• Keyfactor/signserver-tools
• All Keyfactor SignServer repositories