Installation & Setup
Get KestrelSign running on your machine and configure your signing certificates in just a few minutes.
System Requirements
Windows
- Windows 10 or later (64-bit)
- Windows SDK with signtool.exe (included with Visual Studio or installable separately)
- A valid code signing certificate installed in the Windows Certificate Store
macOS
- macOS 10.14 (Mojave) or later
- Xcode Command Line Tools (for codesign and notarytool)
- An Apple Developer ID certificate in your Keychain
- An App Store Connect API key or Apple ID credentials for notarization
Download & Install
Windows
Download the Windows installer from the
KestrelSign product page.
Run kestrelSignSetup.exe and follow the installation prompts.
No additional dependencies are required -- everything is bundled in the installer.
macOS
Download the macOS installer from the KestrelSign product page. Open the DMG and drag KestrelSign to your Applications folder. On first launch, macOS may ask you to confirm you want to open the application.
First Launch
When you first open KestrelSign, you will see the Dashboard. The application starts a 14-day free trial automatically -- no account creation or email required. During the trial you have access to all features with a limited number of signing operations.
Tip: The trial counter tracks signing operations, not calendar days. You can explore the interface, create projects, and configure settings without using any of your trial allowance.
The Setup Wizard
KestrelSign includes a platform-specific setup wizard that detects your signing environment and guides you through any missing configuration. You can access the wizard from the Dashboard at any time.
What the Wizard Checks
On macOS
- Xcode Command Line Tools -- confirms codesign, notarytool, and other required tools are available
- Keychain access -- lists available keychains and checks for Developer ID certificates
- Signing certificates -- identifies Developer ID Application and Developer ID Installer certificates
- Notarization credentials -- verifies your App Store Connect API key or Apple ID is configured
On Windows
- Signtool detection -- locates signtool.exe in the Windows SDK paths
- Certificate store -- scans for available code signing certificates
- Timestamp servers -- verifies connectivity to timestamp services
- NSIS detection -- checks for NSIS if you plan to build Windows installers (Pro feature)
If anything is missing, the wizard provides step-by-step instructions to resolve the issue. Each check shows a clear pass/fail status so you know exactly what needs attention.
Obtaining Certificates
Code signing requires a valid certificate from a trusted authority. Here is a brief overview of what you need for each platform.
Apple Developer ID
You need an Apple Developer Program membership ($99/year) to obtain Developer ID certificates. Once enrolled, you can create certificates through the Apple Developer portal or via Xcode. KestrelSign works with both Developer ID Application (for signing apps) and Developer ID Installer (for signing pkg installers) certificates.
Windows Code Signing Certificate
Windows Authenticode certificates are available from certificate authorities such as DigiCert, Sectigo, and GlobalSign. You can purchase either a standard OV (Organization Validation) certificate or an EV (Extended Validation) certificate. EV certificates provide immediate SmartScreen reputation but require a hardware token (USB key) for signing.
Note: KestrelSign does not sell or provision certificates. You bring your own certificates, and KestrelSign handles the signing workflow.
Next Steps
Once the setup wizard shows all green, you are ready to create your first project and sign your application.