Manage WebStart and Jar Signing

JFrog Platform Administration Documentation

Content Type
Administration / Platform

Java Web Start is a technology developed by Sun Microsystems (now Oracle) to allow you to download and run Java applications directly from your browser with one-click activation.

Java Web Start requires that any JAR downloaded is signed by the software vendor. To support this requirement, Artifactory lets you manage a set of signing keys that are used to automatically sign JAR files downloaded from a virtual repository.

For more information, see the Oracle documentation for Java Web Start.

Signing keys are managed in the Administration module under Artifactory | Security | Keys Management.

Debian Signing Key

Debian signing keys are also managed on this page, however, these are not related to JAR signing. For more information, see Debian Signing Keys.Debian Repositories


Artifactory signs repository metadata (not packages) for RPM, Debian, Opkg, and Alpine.