- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- API Reference
-
Integration Guides
-
Signing Capabilities
- Supported Formats and Platforms
- Timestamping
- Windows Signing - SignTool
- Apple Signing
- AppX & MSIX Signing
- Visual Studio ClickOnce
- Jar Signing
- Sign HLK/HCK using CodeSign Secure
- NuGet Signing
- Mage Signing
- Sign OVA/OVF using Encryption Consulting’s Utility Tool
- Utility Tool for code signing
- Container Signing
- PKCS11 Wrapper
- Reproducible Build
- CI/CD Integration
-
Signing Capabilities
Approval Workflows: Active Request Scenarios
An active signing request requires immediate action due to the strict 100-second time limit. The approval workflow is dynamically determined by the security policy associated with the certificate's Environment Name.
Scenario 1: MFA-Enabled Approval (Two-Step Verification)
If the policy for the associated Environment Name requires Multi-Factor Authentication (MFA) for approval, the process involves two distinct steps, providing the highest level of assurance.
1. MFA Validation Required: The request first appears with the Approval Status as Pending and the Actions column shows Requires MFA.
2. MFA Code Submission: Clicking Requires MFA triggers the system to send a one-time MFA code to your registered email. A pop-up then asks you to enter the one-time password.
3. Action Buttons Appear: Once you validate your identity with the correct MFA code, the request status is updated, and the full approval action buttons— Approve and Deny—will appear, allowing you to finalize the request.
Scenario 2: Direct Approval (Single-Step Verification)
If the policy for the certificate's Environment Name does not require MFA, you are immediately presented with the final decision options.
1. Direct Action: The active request appears with the Approval Status as Pending, and the Actions column displays the Approve and Deny buttons directly.
2. Finalizing the Request: Clicking Approve sends the authorization back to the signing job, updates the status to Approved, and changes the action to Request Completed. Clicking Deny updates the status to Rejected. If the approver doesn't take any action, the request will get timed out and the action button will disappear.
Note: If you don't see a new request or the status hasn't updated, just hit the refresh button.