Devices use signing information to check an application's source and validity before allowing it to access protected APIs. For test purposes, you can create a signing key pair to sign an application. The key pair consists of two keys:
A private key that is used to create a digital signature, or certificate.
A public key that anyone can use to verify the authenticity of the digital signature.
You can create a key pair with the Keystores Manager as described in Managing Keystores and Key Pairs.
Follow these steps to sign a project with a signing key pair.
Right-click on a project and select Properties.
From the Build hierarchy, select Signing.
Check the Sign Distribution checkbox.
Choose a keystore from the Keystores drop-down menu, or click Open Keystores Manager to create a new keystore.
The Certificate Details area displays the Alias, Subject, Issuer, and validity dates for the selected keystore.
Choose a key pair alias from the drop-down menu.
A keystore might be accessed by several key pairs, each with a different alias. If you prefer to use a unique key pair, select Open Keystores Manager and create a new key pair. See Creating a Keystore.
Note - CDC projects cannot be signed with this tool. To sign a CDC project use the JDK jarsigner command from the command line. For example: jarsigner.exe -keystore keystore.ks -storepass keystorepwd MyCdcApp.jar dummyCA