Code Signing Key Management Server (CSKMS)

6.1easy start · #14 of 26
in Code Signing Software

Runs on self-hosted.

Code Signing Key Management Server (CSKMS) is ranked #14 of 26 in code signing software on The Geeks Club. It runs on Self-hosted.

Compared on code signing software

Supported targets: firmware, software applications, software images, block images, hash fingerprints
HSM key protection: Yes
CI/CD signing: Yes

SignServer 0 of 4 in the starter kit Lesson 17.9 SignPath 0 of 4 in the starter kit Lesson 27.3 AWS Signer 0 of 4 in the starter kit Lesson 37.2 Cosign 0 of 4 in the starter kit Lesson 47.1 Sigstore 0 of 4 in the starter kit Lesson 57.1 Keyfactor Platform 0 of 4 in the starter kit Lesson 67.0

Purpose: The server protects code-signing keys and signs software images for device firmware and applications.
Intended users: BlackBerry Certicom says the product enables IC manufacturers and OEMs to sign and secure device software.
Signature algorithms: The datasheet lists RSA, ECDSA, LMS, XMSS and Dilithium digital signatures.
Signing options: It can sign a precomputed hash or compute and sign a hash from a presented file image.
Encryption: The KMS supports AES key management for file encryption and key wrapping, as well as MAC-based image authentication.
Integrations: It provides a RESTful API for code-signing clients and offers custom integration services.
Access controls: Signing keys can be administered using key groups and user permissions, with M-of-N hardware tokens for administration and control.
Key protection: The datasheet says keys are protected in a FIPS 140-2 Level 3 physical HSM.
Audit logging: The server logs signatures and associated metadata, and the datasheet describes an audit trail of users or applications that used protected keys.
Deployment hardware: The datasheet describes a hardened server appliance with a CentOS 7-based secure operating environment.
Maker history: Certicom says it was founded in 1985 and acquired by BlackBerry in 2009.
Founded: 1985

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.