How to Download and Install a Code Signing Certificate (EV & OV) Using SafeNet USB

Nov 25, 2024

Introduction

The following article will walk you through downloading and installing your Code Signing Certificate. At the completion of this procedure your Certificate will be ready to place signatures on drivers, executables, and other files. 

Note: If you've already downloaded your Certificate, please refer to the instructions listed below:

  1. Code Signing for Windows 7, 8 and 10
  2. Code Signing In Java
     

*IMPORTANT: We highly recommend you use Fortify to install your Certificate (provided that you selected the Enrollment with Fortify option during the ordering process, if not, you need to cancel and reorder). Or, you can use IE Compatibility Mode in Microsoft Edge for installation (as IE has been retired). 

Prerequisites

  1. A SafeNet USB eToken is required for new orders, which will be mailed to you. Renewals and reissues will reuse compatible, existing SafeNet USB eTokens.
  2. Download and install SafeNet Authentication Client drivers. Note: The new Safenet eToken 5110 CC (940) requires v10.7 or higher.
  3. Plug in and initialize your USB token. For the new Safenet eToken 5110 CC (940), the default password is "0000".
    For old tokens, the default password is "1234567890".
  4. For Certificate pickup, you must have access to a Windows PC and Microsoft Edge. Once the Certificate is installed and stored on the removable device, you may sign from other platforms such as OS X. 
  5. IMPORTANT: Standard Code Signing Certificate is now issued of R45 Intermediate Certificate and you may need to include the R3-R45 Cross Certificate.

Download & Install

  1. Once your order has been approved, vetted, open the Certificate Download Ready email, and launch the pickup link using Microsoft Edge (with IE Compatibility Mode enabled).
  2. Enter the Temporary Pickup Password that was set at the time of ordering as shown below. Click Next to continue. 

    Capture_01a.jpg
  3. Click Yes when prompted to allow digital certificate operations. 
     
  4.  To install on a SafeNet USB token provided by GlobalSign, select:
    eToken Base Cryptographic Provider.

    Check the box to agree to the subscriber agreement and click Next.

    Capture_4.jpg
  5. Enter the password for your USB token. This was set during the initialization process. 
    Note: For the new Safenet eToken 5110 CC (940), the default password is "0000".
    For old tokens, the default password is "1234567890".


    safenet.png
  6. The screen may appear to freeze for a minute or two; do not press the back button on your browser. You should see the light on your USB token blinking. Eventually you will see a message to wait for a while.

    6.png
  7. Once the token has finished the keypair generation, click the button to Install My Certificate.

    Capture_7.jpg
  8. Again click Yes to allow Digital Certificate operations. 

    Capture_8.jpg
  9. Finally, click OK when you get the Install Success message. 

    success.png

Related Articles

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support