Authenticode code signing for Windows developers, powered by Azure Trusted Signing.
Qwick Cert wraps Microsoft's Azure Artifact Signing service with a developer-friendly CLI. You pay Microsoft for the signing infrastructure and Qwick Cert for the platform that makes it usable.
- Windows (Authenticode is a Windows-only technology)
- Windows SDK 10.0.22621+ (optional — for
qwick verifyand--verifyflag) - A Qwick Cert account — sign up at qwickcert.com
Download qwick-installer.msi from the latest GitHub release and run it. The installer:
- Installs
qwick.exetoC:\Program Files\Qwick Cert\ - Adds the install directory to your system PATH
- Shows in Add/Remove Programs for easy uninstall
- No Node.js required
Download qwick.exe from the latest release and place it anywhere on your PATH. Single file, no installation needed.
npm install -g qwickRequires Node.js 18+.
qwick --version
qwick --helpEach release includes .sha256 checksum files. In PowerShell:
(Get-FileHash qwick-installer.msi -Algorithm SHA256).Hash
# Compare with contents of qwick-installer.msi.sha256qwick auth loginOpens your browser to authenticate. Your session is stored at ~/.qwick/config.json.
qwick initCreates a .qwickrc.json in your directory with your organization slug and signing options.
qwick sign ./dist/myapp.exeThat's it. Qwick Cert handles credential issuance, signing, and revocation automatically.
qwick sign "./dist/*.exe" "./dist/*.dll"qwick sign ./dist/myapp.exe --org acme| Command | Description |
|---|---|
qwick auth login |
Authenticate with Qwick Cert |
qwick auth logout |
Clear stored credentials |
qwick auth status |
Show current auth state |
qwick sign <file> |
Sign one or more files |
qwick verify <file> |
Verify an Authenticode signature |
qwick init |
Initialize signing config |
qwick org list |
List your organizations |
qwick apikey create |
Create a CI/CD API key |
qwick apikey list |
List API keys |
qwick apikey revoke <id> |
Revoke an API key |
qwick setup status |
Check Azure setup status |
qwick config |
View/edit CLI configuration |
qwick doctor |
Diagnose environment issues |
qwick update |
Update the CLI to the latest version |
Use the official GitHub Action for zero-config signing in CI:
- uses: qwickcert/sign-action@v1
with:
api-key: ${{ secrets.QWICK_API_KEY }}
files: dist/**/*.exeOr use the CLI directly with an API key:
QWICK_API_KEY=qwick_ak_... qwick sign ./dist/myapp.exe.exe, .dll, .sys, .ocx, .scr, .msi, .msix, .msixbundle, .appx, .appxbundle, .cab, .cat, .ps1, .psm1, .psd1, .application, .manifest
- Short-lived credentials (72-hour Azure certificates) are issued per signing session and revoked immediately after use.
- Credentials exist on developer machines only during the signing window (seconds).
- All operations are logged in the Qwick Cert audit trail.
MIT