1
PowerShell Code Signing
Gabe edited this page 2026-07-01 18:02:14 +00:00

What is code signing?

Code signing applies a digital signature to PowerShell scripts and modules. This process ensures the scripts consumed by end users comes from a trusted source and has not been tampered with since signing. This allows safely running PowerShell scripts and modules on systems since they are signed and trusted.

Digital Signature

Signed Scripts will have a comment added to the bottom which contains a digital signature based on the signing certificate.

Enforcement

PowerShell code signing is a security mechanism that ensures scripts are authentic and untampered by requiring them to be digitally signed by a trusted certificate.

When combined with an execution policy like AllSigned, PowerShell will only run scripts that have a valid signature from a trusted publisher.

More info in progress

https://adamtheautomator.com/how-to-sign-powershell-script/