Russian developers will soon receive official state-issued certificates for signing software code. MinTsifry plans to launch the issuance process in 2027, with corporate security certificates scheduled for 2028. The digital signature will enable operating systems to identify the software publisher and confirm that the code has not been modified after release.
The ministry published its intentions through Vedomosti. A draft government resolution proposes granting MinTsifry the authority of the National Certification Center. The agency will define certificate requirements, issue and revoke certificates, set validity periods, and maintain an official registry.
For end users, the benefit lies in the operating system’s ability to recognize the publisher of an installation file and display warnings about unknown developers. However, the signature only confirms origin and integrity; it does not certify that the software is free of vulnerabilities.
The law permits charging fees for certificates, but does not require it. Decisions on pricing and tariffs have not yet been made. Technical acceptance by operating systems, browsers, and application stores will also be required. Outside Russia, the certificates will not receive automatic trust, leaving the decision to individual platform owners. Developers targeting multiple markets may therefore need several different signatures.


