Windows certificate

AicippY’s Windows apps and installers are signed by AIVIBE SOFTWARE SERVICES PRIVATE LIMITED with AicippY’s own code-signing certificate. Windows verifies that signature once AicippY’s root certificate is installed; until then it shows the publisher as unknown. Install the root once per computer and every AicippY release after that is verified.

macOS and Linux need nothing: the macOS apps are signed and notarized by Apple, and the Linux packages carry GPG signatures.

1. Download and check the certificate

Download aicippy-code-signing-root.crt, then confirm its SHA-256 fingerprint in PowerShell before installing it:

(New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 .\aicippy-code-signing-root.crt).GetCertHashString("SHA256")

It must print exactly:

1B0F7015193F5B37C6FF03F3780C3993C3561B09300C99E267EAA42726A2DB67

The certificate is AIVIBE SOFTWARE SERVICES PRIVATE LIMITED Code Signing Root CA, valid until 2036.

2. Install it

In a Command Prompt run as administrator, for every user of the computer:

certutil -addstore -f "ROOT" aicippy-code-signing-root.crt

Or in PowerShell run as administrator:

Import-Certificate -FilePath .\aicippy-code-signing-root.crt -CertStoreLocation Cert:\LocalMachine\Root

Without administrator rights, for your own account only:

certutil -user -addstore "ROOT" aicippy-code-signing-root.crt

Or by hand:

1. Double-click aicippy-code-signing-root.crt and choose Install Certificate.
2. Choose Local Machine (or Current User for your account only).
3. Choose Place all certificates in the following store, then Browse, and select Trusted Root Certification Authorities.
4. Finish, and confirm the security prompt.

For organizations, deploy it with Group Policy: Computer Configuration → Policies → Windows Settings → Security Settings → Public Key Policies → Trusted Root Certification Authorities → Import.

3. Check an AicippY download

Right-click the AicippY installer, choose Properties → Digital Signatures, select the signature and choose Details. It reads This digital signature is OK, signed by AIVIBE SOFTWARE SERVICES PRIVATE LIMITED and timestamped.

Remove it

certutil -delstore "ROOT" 044e415c45f6076ff88b01a03ae01371bd68fbca