Werk #19211: Deploy signed PowerShell plugins with Windows agent

Component	Checks & agents
Title	Deploy signed PowerShell plugins with Windows agent
Date	Jun 3, 2026
Level	Prominent Change
Class	New Feature
Compatibility	Compatible - no manual interaction needed
Checkmk versions & editions	3.0.0b1 Not yet released Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT 2.5.0p8 Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

The Windows agent MSI package did not include signed variants of the PowerShell-based agent plugins. Users who enforced PowerShell execution policies had to sign the plugins manually or lower the execution policy site-wide.

Starting with this release, the MSI package ships pre-signed PowerShell plugins. The bakery prefers the signed variant over the unsigned one when both are present, so existing setups benefit automatically after an agent update.

To the list of all Werks