Whenever files are created digitally no matter if they are media files, executable files, documents, or any other file, they are digitally signed by the source of that data. For example, when the setup file which is an executable file for Google Chrome browser is released by Google, they sign it digitally. So, whenever the file is downloaded directly from the official source, the authenticity of this file can be verified. In another scenario, someone else can host the same file to their servers as well. That is fine because that file will not be modified by any means. But if that file is torn down and some modifications into the code are made, then the digital signature gets removed automatically, and hence the authenticity of the file will not be verified, as the digital signature is removed automatically which recompiling the tampered setup file. So, this is how it works actually. Now, we also need to learn about how to verify the digital signatures that come with the file. So, let us just get started.
Check Digital Signature for a Program in Windows 11/10
We will discuss three methods to check the Digital Signatures of the programs on Windows OS.
1] Via File Explorer
First of all, open Windows File Explorer and navigate to the location where your program is saved. Right-click on the setup file and then click on Properties. Navigate to the tab that is labeled as Digital Signatures.
In the Signature List, if you see entries that means that your file is digitally signed. You can double-click on any of those entries to view additional details about the signing authority. Hence, you can know if the file is signed by the original distributor of the software or not.
Additionally, in the Detailed view of signature, you can click on a button that says View Certificate to view additional details about the certificate that comes with the signature.
2] Using DigiCert Certificate Utility
Use this link to download the latest version of DigiCert and run the executable file. Accept the terms of use displayed at the start and then click on the tab that says Code Signing and then in the header section, click on Check Signature. Select the setup file that you need to check digital signature.
This will lead DigiCert to check the signature and display to whole information summary in a new window that opens. There are two things that DigiCert verifies. They are as follows:
If the file was signed and if the signature is valid.It checks the timestamp of the signature.
If you get two green checkmarks as shown in the screen snip above, the verification is successful. You have additional information in that window too for your comfort.
3] Using SignTool
Microsoft ships a program with the Windows SDK that is called as SignTool. Windows SDKs or Software Development Kit is not shipped in-built with Windows. It is intended for developers, and they are supposed to install it separately. If you are interested in giving this method a try, make sure you have a suitable SDK for yourself. You can download the Windows 10 SDK from here. This post will help you if you see The digital signature for this file couldn’t be verified message.
