Before using the jarsigner tool, you need to know the friendly name of the key entry that you are using to sign the JAR. If you do not know the friendly name, you can use the JDK keytool application to display it.

Finding the friendly name of the key entry

To determine the friendly name of the key entry (optional if you know the friendly name):

1. Open a command prompt.

2. Enter the command:
   <path to keytool>\keytool -list <certificate_name> -v
   For example:
   \JDKS\jdk1.6.0_03\jre\bin\keytool -list EntrustCert -v

3. Enter the password when prompted.
   Keytool lists information about the keystore, including the friendly name.

Signing the JAR file

To sign the JAR file, use the jarsigner tool included in the JDK. Include the timestamp option if you want to timestamp the signature. The URL of the Entrust timestamp server is http://timestamp.entrust.net/rfc3161ts2

1. Open a command prompt, if you have not already done so.

2. Enter the following command:
   <path to jarsigner>\jarsigner -tsa <URL of the Entrust timestamp server> <certificate name> <path to JAR file>\<JAR file name.jar> <friendly name of key entry>
   For example:
   
   

3. Enter the password when prompted.
   You have signed a JAR file.
   
   For more information, follow the link to the user guide.
   Java Code Signing Guide

4. To verify the code has been signed correctly, you can run the command :

5. Jarsigner -verify -verbose <path><your jar file>

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll-free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.