Menu

Download and Install Code Signing Certificate (HSM-Based)

Jun 17, 2025

OVERVIEW: This page walks you through the process of downloading and installing you GlobalSign Code Signing Certificate using HSM. At the completion of this procedure, your Certificate will be ready to place signatures on drivers, executables, and other files. For Token-based installation, please refer to this guide instead.

 

Prerequisites

IMPORTANT: This guide is for HSM-based implementation. If you selected Token-based implementation, which also uses Fortify or IE enabled browser to install your certificate, follow this guide instead. Otherwise, you need to cancel your current order and reorder to change your selection.

 

  1. Approved and vetted GlobalSign Code Signing Certificate.

  2. Internal or external audit letter will be required stating that the subscriber will be using compliant HSMs for EV CodeSigning Certificates.

  3. For Certificate pickup, you must have access to a Windows PC. Once the Certificate is installed, you may sign from other platforms such as OS X.

IMPORTANT: For HSM-based installation, FIPS 140-2 Level 2 compliant is the required HSM to use to generate the CSR and private key for EV Code Signing certificate. The CSR should be created with a key size of 4096 bit or greater.

 Guidelines

  1. Open the Certificate Download Ready email and launch the pickup link using any available browser. 

  2. Enter the Temporary Pickup Password that was set at the time of ordering and click Next to continue. 

  3. Enter your CSR on the Enter CSR Required box. Then, tick I Agree to the subscriber Agreement and click Next to proceed. 
    Note: Paste the CSR generated on the HSM which is FIPS 140-2 Level 2 compliant.

  4. Download your Digital Certificate and Intermediate Certificates.

  5. Import the Certificate into your HSM.

    IMPORTANT: These Certificates will match the private key used to generate the CSR submitted during the ordering process, for information on how to import these Certificates on your HSM, please consult your HSM vendors instructions.

  6. You are now ready to use your certificate.

Related Articles

Code Signing Best Practices

Mar 2, 2020, 6:33 AM

GlobalSign recommends that developers follow best practices for the Code Signing process and for securely generating and storing private keys.

Read More

Ordering an EV Code Signing Certificate (HSM-Based)

Mar 2, 2020, 6:51 AM

The following article will walk you through the ordering process of an EV Code Signing Certificate (HSM-Based). If this is not the solution you are looking for, please search for the solution in the search bar above.

Read More

How to Order a New Client Certificate

Jun 20, 2020, 3:27 AM

This page walks you through the process of ordering a new GlobalSign Client Certificate in GCC. At the completion of this procedure, you will be able to place an order for your AATL, Personal Signing and/or Code Signing Certificate.

Read More

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support