CodeSign Secure v3.2.0
Release notes for CodeSign Secure v3.2.0 (product version 3.02).
Release date: 08 October 2025. API version 3.02. Tested for deployment on Windows Server 2022; signing tested on Windows 10 and Windows 11.
New features and changes
| Area | Change |
|---|
| User interface | Redesigned interface with more filters on every table and a Refresh button on each table. |
| Sign-in | Local sign-in with an email and password set by a System Admin, alongside Azure AD. Only one session per account; a new sign-in revokes older sessions. |
| PKCS#11 Wrapper | New signing client for Windows, Linux and macOS, downloadable from Signing Tools. |
| EC KSP for Mac | New macOS signing client, downloadable from Signing Tools. |
| Profile | New Maintenance area for System Admins: restart or shut down the server and create support packages. |
| Dashboard | New user-specific KPIs and graphs. HSM health is now checked with the HSM utilities as well as PKCS#11, and cached for 10 minutes. |
| Keys and Certificates | Certificate-to-environment mapping (one environment per certificate), single and bulk certificate download, Edit Environment, and a new Expired status. |
| App Management | Environment and policy settings moved to the new Environment section. The user who creates an application becomes its single owner. Repository URL and Status are no longer part of the application form. |
| Environment | New section. One policy per environment: Certificate Owner, Quorum or No Approval. Project Manager is no longer a policy option. |
| Plugins | New section for OpenTelemetry log export to Splunk and Grafana Loki. |
| User | Roles and permissions moved to their own section. Deleting a user now requires a replacement user. |
| Roles and Permissions | New permission to control the Plugins page for System Admin. Some permissions renamed for clarity. |
| Email | New Signing MFA Code template; Assign Signing User/Office template removed; System Maintenance renamed HSM Maintenance; templates use a controlled set of dynamic fields; one active SMTP configuration at a time. |
| Reports | Approver Request Report removed; more analytics in the remaining reports. |
| Logs | Log entries now include the username and IP address. |
API additions
Release 3.02 added 42 endpoints for authentication, certificates, the dashboard, environments, reports, approvals, plugins and maintenance. Every endpoint is listed in the API Reference.
Defect fixes
| Defect in 3.01 | Fix in 3.02 |
|---|
| Deleting a user also deleted all objects and entries that belonged to that user. | Deleting a user now requires a replacement user, who takes over those objects and entries. |
