- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- API Reference
-
Integration Guides
-
Signing Capabilities
- Supported Formats and Platforms
- Timestamping
- Windows Signing - SignTool
- Apple Signing
- AppX & MSIX Signing
- Visual Studio ClickOnce
- Jar Signing
- Sign HLK/HCK using CodeSign Secure
- NuGet Signing
- Mage Signing
- Sign OVA/OVF using Encryption Consulting’s Utility Tool
- Utility Tool for code signing
- Container Signing
- PKCS11 Wrapper
- Reproducible Build
- CI/CD Integration
-
Signing Capabilities
CodeSign Secure v3.2.1
Release notes for CodeSign Secure v3.2.1 (product version 3.02.01).
Release date: 01 August 2026
| Component | Version |
|---|---|
| Product | 3.02.01 |
| Backend | 3.02.01 |
| Frontend | 3.03.01 |
New and improved
-
PKCS#11 Wrapper key caching. The wrapper caches the signing key for faster signing. You can give it the key label instead of relying on the tool to find it: through the EC_PKCS11_KEY_LABEL environment variable, through the [key_filter] section of ec_pkcs11client.ini, or by automatic detection from the host’s command line, which is the default.
-
New PKCS#11 Wrapper settings to control caching and label detection (see the table below).
-
Performance: API and portal response times have been optimized throughout the portal.
| Environment variable | Values | Default |
|---|---|---|
| EC_INI_FILE_PATH | Path to ec_pkcs11client.ini. Required (unchanged). | Not set |
| EC_PKCS11_KEY_LABEL | The key label to sign with, for example, EC-Cert-020 | Not set |
| EC_PKCS11_NO_AUTO_KEY_LABEL | 1 turns off automatic key label detection | Not set: detection on |
| EC_PKCS11_DISABLE_CACHE | 1 turns off the key cache | Not set: cache on |
Upgrade notes
-
Download the new PKCS#11 Wrapper from Signing Tools on each build machine. Existing INI files keep working.