First, generate a RSA key for signing Second, sign the jar with jarsigner You can ignore : “warning : POSIX file permission and/or symlink attributes detected. These attributes are ignored when signing and are not protected by the signature.”