Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Code Signing

Top Best Practices for Storing X.509 Private Keys

Public Key Infrastructure (PKI) plays a vital role in managing the public keys utilized by networks. It’s used for public-key encryption, identity management, certificate distribution, and revocation. The foundation of a PKI system lies in asymmetric cryptography involving a pair of public and private keys. Safeguarding the X509 private key is an essential aspect of PKI management.

How to Order or Renew DigiCert Code Signing Certificates?

DigiCert is a reputable Certificate Authority (CA) that offers code signing certificates for ensuring software application integrity and security. Whether you are a developer looking to order a new code signing certificate or an existing certificate holder seeking to renew, DigiCert provides a seamless process to meet your needs. This article will guide you through the seamless steps of ordering or renewing your DigiCert code signing certificate.

How to Generate CSR and Key Attestation using YubiKey Manager for Code Signing Certificates

Want an additional layer of security for your software or app? YubiKey is a hardware that offers safe authentication and encryption for creating and authenticating private keys. Private keys generated by YubiKey devices may be secured such that they never leave the device, making them impenetrable to hackers. Due to New CA/B, If you are using an existing token such as YubiKey (FIPS Series), then here is the quick and easy guide that will help you to generate private key, CSR and Attestation Certificate in YubiKey using YubiKey Manage.

How to Sign .EXE File Using YubiKey Manager? - Detailed Guide from SignMyCode.com

Learn how to sign windows executables using YubiKey! Whenever you are individual software developer or a organization needs to publish software, code signing gets performed. It helps to build a trustworthy relationship with end-users, as signed software eliminates Unknown Publisher Warnings. According to new CA/Browser policies, every certificate owner needs to store the private key in a hardware token. And the token must align with FIPS standards. Otherwise, the certificate will not get issued.

DigiCert Code Signing Changes: New Private Key Storage & API Modifications

Beginning on June 1, 2023, at 00:00 UTC, industry standards will mandate that private keys for code signing certificates must be stored on hardware that meets specific security certifications such as FIPS 140 Level 2, Common Criteria EAL 4+, or an equivalent standard. This requirement applies to all new code signing certificate requests and requests for renewal and reissue of existing certificates.

Simplifying Code Signing Certificate Delivery Methods (Private Key Storage Options)

At SignMyCode, we understand the importance of streamlined and secure code signing certificate delivery. Our certificate delivery methods have been updated to ensure compliance with the latest standards. This article pertains to Code Signing certificates acquired after May 14, 2023. All Code Signing certificates now require installation on physical hardware tokens.

What are SafeNet Luna Network HSM 7 and Thales Luna Network HSM 7?

We will dive into the world of Luna Network HSM 7. You can explore its capabilities and the two options available: SafeNet Luna Network HSM 7 and Thales Luna Network HSM 7. Also, discover how these solutions enhance security and protect your cryptographic keys.

CA/B Forum Baseline Requirements v2.8 for Code Signing Certificates

Under the CA/B Forum BRs for Code Signing Certificates v2.8, Sectigo Certificate Services has implemented a hosted key attestation service to ensure the verification of hardware-backed keypairs during the issuance and management of Code Signing Certificates.

Code Signing with USB Tokens: A Comprehensive Guide

USB, hardware, or cryptographic tokens are portable devices that securely store cryptographic keys. These tokens typically connect to a computer or other devices via USB. USB tokens offer a compact and convenient solution for storing and protecting sensitive cryptographic keys, certificates, and other credentials. They are designed to provide strong encryption, tamper-resistant hardware, and secure key storage.