---
title: Signing your shell script for macOS
slug: device-management-apple/signing-your-shell-script-for-macos
createdAt: 2026-10-06T07:47:38.103Z
---

Ivanti EPMM requires you to sign your shell scripts using the Ivanti EPMM script signing tool.

**Prerequisite**

[Testing your shell script for macOS](docId\:hnq59nP_PnfxidzjW3lrw)

**Procedure **

1. Download the Ivanti EPMM signing tool and place it in your $PATH. You can download it from [Ivanti Support ](https://support.mobileiron.com/mi/mobileatwork-macos/current/); a login may be required.
2. Open a terminal window.
3. Sign your script by issuing a command with the following syntax:
   sign -s “My Signer” -r yes *script\_name*.sh
   “My Signer” is the signing identity you created in [Creating certificates for your shell scripts for macOS](docId\:cUsDYrURDQxYrazku_HH9) <font color="#000000">*-r yes*</font> is an optional parameter. Include it only if you want to run the script as root because the script requires root permissions. Without -r yes, the script runs as the device user. This parameter is applicable to Ivanti Mobile\@Work 1.1.0 for macOS or supported newer versions. <font color="#000000">*script\_name*</font> is the name of your macOS script.

:::Paragraph{indent="1"}
The script signing tool produces a signed script called <font color="#000000">*script\_name*</font>.sh.p7s, where <font color="#000000">*script\_name*</font> is the name of the script.
:::