Werk #19253: Sign Windows artifacts with Azure

Component

Checks & agents

Title

Sign Windows artifacts with Azure

Date

Jul 22, 2026

Level

Trivial Change

Class

New Feature

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

3.0.0b1 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.5.0p10 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.4.0p35 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.3.0p49 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT

checkmk ships several binaries and packages compiled for Windows, e.g. the Windows agent, its msi package or plugins like mk-sql.exe/mk-oracle.exe. We are now switching the way we are signing those artifacts.

When looking at the certificate, users will notice the following difference.

Before:

Subject: CN=Checkmk GmbH,O=Checkmk GmbH,ST=Bayern,C=DE
Issuer : CN=Sectigo Public Code Signing CA E36,O=Sectigo Limited,C=GB

After:

Subject: CN=Checkmk GmbH,O=Checkmk GmbH,L=München,ST=Bavaria,C=DE
Issuer : CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

To the list of all Werks