As a substantial increase in Software Supply Chain (SSC) attacks and use of open-source software is observed in recent years, GlobalSign understands heightened concerns around securing codes and code signing process at your company. Whether it’s a SSC attack or other, we can help you protecting your private keys against malicious party by executing compliance with industry standards which require the strongest key protection possible, i.e. FIPS 140 Level 2 or Common Criteria EAL 4+ compliant. Proper handling of private keys not only minimizes the risk of fraudulent access to the keys, but also allows for easier trace at the time of forensic investigation.
Storing the keys on secure cryptographic hardware, such as a USB token or Hardware Security Module compliant with the standards, significantly decreases the chance of key compromise compared to storing the keys locally or substandard equivalents for easier internal sharing. Therefore, now it’s a requirement for both standard Code Signing and Extended Validation Code Signing Certificates. Both GlobalSign standard Code Signing Certificates and GlobalSign EV Code Signing Certificates are automatically shipped with a standards-compliant cryptographic USB token, unless HSM implementation option is selected at checkout.
Code Signing Certificates are used by developers on all platforms to digitally sign the applications and software they distribute over the Internet. Code Signing essentially provides the same assurance as a shrink wrapped CD – the signed code includes the name of the publisher and assurance that the code hasn't been tampered with since being published. Anyone downloading software off of the internet can make a decision whether or not to trust the software.
Sign as many applications as needed with no additional fees.
Digitally sign Authenticode, Office VBA, Adobe AIR, Mozilla, Mac OS with one certificate.
GlobalSign has offices worldwide offering local language customer support and account management.
Time stamping is included and recommended when the certificate expires, allowing for long term validity, meaning the signature on code does not expire what the certificate expires.
Digitally signing code prevents users from abandoning the installation process by removing alarming security messages that accompany unsigned code.
GlobalSign Extended Validation (EV) Code Signing Certificates establish immediate reputation with Microsoft’s SmartScreen Filter, removing scary warning messages.
Helpful Resources
Powered by WHMCompleteSolution
Copyright © 2024 One Sign Pte. Ltd.. All Rights Reserved.
