Skip to main content

Ship Windows software under your own name

Code signing certificates from Certum, a certificate authority on the EU Trusted List. Your company name replaces "Unknown publisher", drivers get the EV that the Windows Hardware Developer Program requires, and we check your application before you pay.

Why order through Klarseal

  • Nothing to ship, nothing to procure

    No procurement round, no token in the post, no build-server project — order, confirm, sign. Validation is done by the certificate authority, and how fast it goes depends mostly on how quickly you supply documents.

  • Verification that checks itself

    We pull your company from Brønnøysundregistrene and have Certum confirm the application is complete — before you pay. Certum then performs the identity validation. Incomplete applications are what mostly makes certificates slow.

  • An MCP server for your assistant is planned

    We are designing an MCP server and a read-only status API so your own tools can check an order. Neither is available yet, and we give no date. Until then the status link in each email shows where your order stands, and the order page holds the invoice and the certificate details.

  • Email
    Support by email, answered by a person
    Write to support@klarseal.com.
  • None
    USB tokens to buy, ship or lose
    Certum’s cloud products need no USB token. You sign from your own machine through SimplySign.
  • 459
    Days of validity per certificate
    The maximum any code signing certificate may carry. Renewal is one step.
  • 13
    Months your documents stay valid
    Certum reuses them, so the second certificate is far less work than the first.

One certificate, everywhere your software lands

Installers, packages, scripts and drivers take the same signature — and your customers' IT departments can allow you by name.

  • Windows 10 and 11
    Your company name appears in the install dialog and in file properties instead of "Unknown publisher".
  • Windows drivers
    Kernel-mode driver submissions to the Windows Hardware Developer Program require an EV certificate.
  • Installers and packages
    EXE, DLL, MSI and MSIX all take the same signature from the same certificate.
  • PowerShell and Office
    Signed modules and VBA projects run under stricter execution policies.
  • WDAC and AppLocker
    IT departments can allow your software by publisher, so your updates keep working.
  • Timestamped for good
    Certum’s timestamp service is included, so files you shipped years ago still verify.

Your name on your software

Two products, one year, one price. We check the application before you pay, and refund in full if it cannot be issued.

Questions people ask first

If yours is not here, email support@klarseal.com and a person answers.

All questions in Help →
How fast can I get a certificate?

Validation is done by the certificate authority, and how fast it goes depends mostly on how quickly you supply documents. After you order, the pace is set by Certum’s company check and by the identity check of the person you name. We do not promise a date, because we do not control those two steps. What we control is that your application enters complete, which is what usually causes delay.

Do I need Standard (OV) or EV?

Standard proves your company published the software and is right for most publishers. EV is required for kernel-mode drivers and by some enterprise policies. If no customer or policy has asked you for EV, Standard does the same job with less validation work.

Will signing remove the "Windows protected your PC" warning?

Signing puts your verified company name in the dialog instead of "Unknown publisher". SmartScreen also weighs reputation, which both OV and EV build over time as your software is downloaded — since March 2024 EV no longer clears the warning instantly. Reputation accrues to the certificate, so it carries across releases.

Do I need a USB token?

No. The private key is generated and kept in Certum’s hardware security module, and you sign from your own machine through the SimplySign app. Nothing to buy, ship or lose.

Can my AI assistant use Klarseal?

Not yet. A Klarseal MCP server is planned, so that an assistant could read an order, check expiry and prepare a renewal, but it is not available and we give no date. Today you follow an order through the status link in the emails we send. Paying, signing and identity checks would stay with a person and with Certum.

Can I order as a private person?

Klarseal sells to businesses — Norwegian companies and registered sole traders with an organisation number. As a private person you can buy the same certificate directly from Certum.