SailPoint CLI - Expired Certificate

What problem are you observing?

Please describe how the feature is currently behaving, and why this is a problem. Please share screenshots and any other supporting information that you have.

  • Just installed the SailPoint CLI application. Looks like the digital signature for the main sail.exe was re-signed on June 3, 2025 with an expired certificate, which is interfering with our EPM policy for a valid publisher signature.

What is the correct behavior?

Bugs are considered issues with a feature that prevent it from behaving as designed. In what way do you believe this feature is not working as designed?

  • The digital signature should have a valid non-expired certificate.

What product feature is this related to?

Please indicate which product and feature you are having issues with. Please include version numbers and any other relevant information.

  • SailPoint CLI.

What are the steps to reproduce the issue?

Please share a complete and detailed list of steps that others can follow to reproduce this issue. Include links, images, and other supporting information to help us reproduce this. Issues that can be reproduced are more likely to be prioritized.

  • N/A

Do you have any other information about your environment that may help?

This could be software versions, browser versions, special configurations, etc.

  • Installed on Windows 11. SailPoint CLI tool version 2.5.5.

Hey @ebanderson,

Thank you for bringing this to our attention! I must have missed the right file when I uploaded it on the latest release. I just updated it and then downloaded it and checked the certificate and verified it is correct.

Please re-download the installer and let me know if this resolves it for you!

Thanks for the quick reply! I downloaded the new “sail_2.2.5_windows_amd64.msi” that I see was updated this morning and do see the updated certificate on the .msi, but after installation I’m still showing the same expired certificate on the new sail.exe file.

@ebanderson

Thanks for highlighting this Erik, you are correct.

I’ve uploaded a new file where both the msi and the exe are signed correctly.