$Date: 2025-08-11 19:18:47 +0200 (Mon, 11 Aug 2025) $

VBoxManage signova

VBoxManage-signova 1
VBoxManage-signova Digitally sign an OVA &product-name;
`VBoxManage signova` ova --certificate=file --private-key=file --private-key-password-file=password-file --private-key-password=password --digest-type=type --pkcs7 --no-pkcs7 --intermediate-cert=file --force --verbose --quiet --dry-run

## Description

The `VBoxManage signova` command adds a digital signature to an OVA file.

ova

  The OVA file to sign.

`--certificate=file`

  File containing the certificate that the OVA should be signed with. This can be in either PEM format (base64) or DER (binary).

`--private-key=file`

  The file containing the private key. This can be in either PEM (base64) or DER (binary) format.

`--private-key-password-file=password-file`

  File containing the private key password.

`--private-key-password=password`

  The private key password.

`--digest-type=type`

  Select the cryptographic digest algorithm to use for signing the OVA file. The possible values are : SHA-256 (default), SHA-512 and SHA-1.

  Some older versions of VMware's OVF Tool command line utility and other VMware products may require the `--digest-type=sha-1` option.

`--pkcs7`, `--no-pkcs7`

  Enables or disables the creation of an additional PKCS#7/CMS signature. This is enabled by default.

`--intermediate-cert=file`

  File containing an intermediary certificate that should be included in the optional PKCS#7/CMS signature. The file can be in either PEM format (base64) or DER (binary). This option can be repeated to add multiple intermediate certificates. This option implies the `--pkcs7` option.

`--force`

  Overwrite existing signature if present. The default behaviour is to fail if the OVA is already signed.

`--dry-run`

  Do not actually modify the OVA, just test-run the signing operation.

`-v`, `--verbose`, `-q`, `--quiet`

  Controls the verbosity of the command execution. The `--verbose` option can be specified multiple times to get more output.