Code Signing

How to set up Safenet Driver for VBA Signature with Token-based Certificate

Feb 22, 2024

This support article will guide you through the step-by-step process of setting up Safenet Driver for VBA Signature with Token-based Certificate. If this is not the solution you are looking for, please search for your solution in the search bar above.

Dual Code Signing

Feb 21, 2024

In some situations you may need to sign an application with two different signatures (hashing algorithms). This is usually when you want to sign an application that will be used on Windows 7 and Windows 10.

Windows Code Signing Hash Algorithm Support

Feb 21, 2024

Hash algorithms are utilized for integrity checks. They can verify that nothing has changed on a certificate, that a file downloaded correctly, that a signed document hasn't been tampered with, and more. Although your Code Signing Certificate may be signed by GlobalSign to verify its integrity, when you sign code, you may also specify the hash algorithm used when validating the digital signature on your program or driver. This is called the file digest (/fd).

Initialize Safenet eToken 5110 CC (940) for EV Codesigning Certificates

Feb 22, 2024

This article will walk you through initializing your Safenet eToken 5110 cc for your EV CodeSigning Certificate. This is a requirement when you first set up your token. It may also be used in the event you forget the password to your token.

New Requirements related to Private Key protection for CodeSigning Certificates

Feb 12, 2024

The Certificate Authority/Browser (CA/B) Forum has introduced updates to Baseline Requirements (BRs) for issuing CodeSigning Certificates. Effective 1st June 2023, a private key should be generated and protected in a FIPS 140‐2 Level 2 or Common Criteria EAL 4+ compliant devices for both Standard and EV CodeSigning Certificates. This would mean for Standard CodeSigning Certificate users, the key pair must be generated and stored in a hardware crypto module that meets or exceeds the requirements of FIPS 140-2 level 2 or Common Criteria EAL 4+. In addition, the updates stipulates specific ways on how CA should ensure that private key is generated and protected on the compliant device.

Minimum Requirements for Code Signing

Feb 21, 2024

Certificate Authority Security Council's Minimum Requirements for the Issuance and Management of Code Signing Certificates

Code Signing Best Practices

Feb 21, 2024

GlobalSign recommends that developers follow best practices for the Code Signing process and for securely generating and storing private keys.

Ordering an EV Code Signing Certificate

Feb 19, 2024

1. Log in to your GCC (GlobalSign Certificate Center) Account.

Ordering an EV Code Signing Certificate (HSM-Based)

Feb 19, 2024

The following article will walk you through the ordering process of an EV Code Signing Certificate (HSM-Based). If this is not the solution you are looking for...

EOL SHA-1 Authenticode and CodeSign Timestamping

Jan 30, 2023

Expiration of KMCS Certificates

Jan 30, 2023

In the past, Customers signing software or drivers that were to be executed in Windows Kernel Mode, could use any GlobalSign Code Signing Certificate along with the Microsoft Cross Certificate linking back to the GlobalSign Root R1. This Cross Certificate will expire on April 2021 and Microsoft will not be issuing trusted Cross Certificates for this purpose anymore.

SDK Signing Options - Code Signing Certificates

Feb 21, 2024

Available SDKs or Command Line Prompts For Signing Your Applications

Combine PVK + SPC to Keystore Certificate - Code Signing Certificates

Feb 21, 2024

Article Purpose: This article provides step-by-step instructions for combining PVK + SPC to a keystore certificate - Code Signing Certificates. If this is not the solution you are looking for, please search for your solution in the search bar above.

Transform Certificate to PVK + SPC Combination - Code Signing Certificates

Jun 27, 2023

This article provides step-by-step instructions for transforming your code signing certificate to a PVK + SPC combination. If this is not the solution you are looking for, please search for your solution in the search bar above.

EV Code Signing - Overview

Feb 21, 2024

Introduction Extended Validation Code Signing certificates provide a higher level of security and assurance over standard code signing certificates.

Fortify FAQs

May 9, 2023

This support article contains Frequently Asked Questions about Fortify.

Code Signing with Azure Key Vault and Azure Signtool using GlobalSign’s Code Signing Certificate

Aug 12, 2024

The CA and Browser Forum’s has new BR guidelines that affect code signing certificates. Private Keys and Code Signing Certificates needs to be stored on a Cloud HSM, Physical HSM, or security token. The token or HSM must be compliant with FIPS 140 Level 2 or 3. After these new guidelines, conventional way of signing builds using a PFX file is obsolete, and developers are facing issues related to Signing executables. This article will help you in Signing Windows Executables using GlobalSign’s Code Signing Certificate, Azure Key Vault and Azure SignTool.

Code Signing of Windows Builds using SignTool and AWS Cloud HSM

Aug 12, 2024