About CodeSign Secure
What is a Code Signing Solution?
A Code Signing Solution is a specialized security platform that provides the infrastructure,
tools, and processes for developers and organizations to apply a digital signature to their
software, scripts, drivers, and executables. Essentially, it serves as a digital stamp of
approval, assuring users about the authenticity and integrity of the software they are
installing or running.
What is CodeSign Secure?
CodeSign Secure simplifies the entire code signing process, from certificate management to
automated workflows. It integrates seamlessly with your existing development environment,
allowing you to maintain a high level of security without disrupting your productivity.
CodeSign Secure helps you achieve this by leveraging industry-standard cryptographic
practices to protect your code from tampering and unauthorized distribution. You can provide
your users with confidence that the software they download, and install is genuine and has
not been altered since it was signed by you.
Key Features of CodeSign Secure
-
Centralized Key Management:
Securely store and manage all your code signing keys and certificates in one centralized, controlled environment.
-
Automated Signing Workflows:
Integrate code signing directly into your continuous integration and continuous deployment (CI/CD) pipelines, enabling automated, touchless signing.
-
Role-Based Access Control (RBAC):
Implement granular permissions to ensure that only authorized personnel can access and use code signing keys.
-
Hardware Security Module (HSM) Support:
Enhance security by utilizing certified hardware to protect cryptographic keys from theft or misuse.
-
Comprehensive Auditing and Reporting:
Maintain a complete audit trail of all signing activities, including who signed what and when, for compliance and security monitoring.
-
Support for Multiple File Types:
Sign a wide range of executables, scripts, and applications, including Windows, macOS, and Linux formats.
Platforms and Software Version Compatibility
CodeSign Secure runs on Windows Server 2022, with Apache hosting the backend and the frontend. You can run it on a single server or as a cluster of servers behind a load balancer. For formats, algorithms and client platforms, see Supported Formats and Platforms. For how the components fit together, see Architecture and Concepts.
Supported Operating Systems
Core Software Requirements
- Python: v3.10.11 or above
- MongoDB: v6.0 or above
Supported HSMs
Entrust nShield HSM
- Firmware: 13.8.0 or later
- Software: 13.7.3 or later
Thales Luna HSM
- Firmware: 10.7.1-125 or later
- Software: 7.3.0 or later
Securosys Primus HSM
- Firmware: 2.8.21 or later
- Software: Primus PKCS#11 provider for your firmware version
Utimaco SecurityServer Se Gen2
- Firmware: 4.32.0 or later
- Software: SecurityServer PKCS#11 client for your firmware version
For FIPS details and other HSMs, see Supported HSMs.
