Feb 19, 2024

Introduction

The following article will walk you through downloading and installing your EV Code Signing Certificate (HSM-Based). At the completion of this procedure your Certificate will be ready to place signatures on drivers, executables, and other files.

*IMPORTANT: We highly recommend you use Fortify to install your Certificate (provided that you selected the Enrollment with Fortify option during the ordering process, if not, you need to cancel and reorder). Or, you can use IE Compatibility Mode in Microsoft Edge for installation (as IE has been retired). 

Prerequisites

1. For Certificate pickup, you must have access to a Windows PC and Microsoft Edge. Once the Certificate is installed, you may sign from other platforms such as OS X.
2. NEW: An internal or external audit letter will be required stating that subscriber will be using compliant HSMs for EV CodeSigning Certificates.

Download & Install

1. Once your order has been approved and vetted, open the Certificate Download Ready email, and launch the pickup link using Microsoft Edge (with IE Compatibility Mode enabled).

2. Enter the Temporary Pickup Password that was set at the time of ordering as shown below.

   

3. Enter your CSR on the Enter CSR Required box. Then, tick I Agree to the subscriber Agreement and click Next to proceed. Note: Paste the CSR generated on the HSM which is FIPS 140-2 Level 2 compliant.

   

4. To Install your Certificate, click the Install My Certificate button. This will download the file to your computer.

   

5. After which, you need to import the Certificate into your HSM. Note: These Certificates will match the private key used to generate the CSR submitted during the ordering process, for information on how to import these Certificates on your HSM, please consult your HSM vendors instructions.

6. Now you're ready to use your Certificate.