Sep 24, 2024

Introduction

The following article will walk you through downloading and installing your EV Code Signing Certificate (HSM-Based). At the completion of this procedure your Certificate will be ready to place signatures on drivers, executables, and other files.

*IMPORTANT: We highly recommend you use Fortify to install your Certificate (provided that you selected the Enrollment with Fortify option during the ordering process, if not, you need to cancel and reorder).  

Prerequisites

1. For Certificate pickup, you must have access to a Windows PC and Microsoft Edge. Once the Certificate is installed, you may sign from other platforms such as OS X.
2. NEW: An internal or external audit letter will be required stating that subscriber will be using compliant HSMs for EV CodeSigning Certificates.

Download & Install

1. Once your order has been approved and vetted, open the Certificate Download Ready email, and launch the pickup link using Microsoft Edge.

2. Enter the Temporary Pickup Password that was set at the time of ordering as shown below.

   

3. Enter your CSR on the Enter CSR Required box. Then, tick I Agree to the subscriber Agreement and click Next to proceed. Note: Paste the CSR generated on the HSM which is FIPS 140-2 Level 2 compliant.

   

4. Now Download your Digital Certificate and Intermediate certificates:

   

5. After which, you need to import the Certificate into your HSM. Note: These Certificates will match the private key used to generate the CSR submitted during the ordering process, for information on how to import these Certificates on your HSM, please consult your HSM vendors instructions.

6. Now you're ready to use your Certificate.