Code Signing

Given the prevalence of malware and Advanced Persistent Threats (APTs), many software vendors, providers of online services, and enterprise IT organizations are under pressure to increase the security of their code signing process. The nShield Code Signing solution helps software producers of all types implement highly secure and efficient code signing processes that protect their organizations from risks associated with software tampering. Combining tamper-resistant nShield HSMs with support from Entrust Professional Services (PS), the nShield Code Signing solution is backed by our extensive expertise in code signing best practices and standards of due care. HSMs provide tamper-resistant, certified protection for private code signing keys and a secure platform to perform critical digital signature processes. nShield Code Signing also offers a flexible range of capabilities to simplify and automate the code signing request/approval workflow for organizations with more complex requirements.

Each nShield Code Signing solution includes one or more nShield HSMs, the nShield Code Signing framework, and service days appropriate to your specific requirements. Entrust PS will design and configure your solution to support your specific code signing workflow. nShield Code Signing is offered in three configurations:

• Developer. This code signing solution is designed for the individual developer workstation for low volumes of code signing.
• Workgroup. This code signing solution is designed for organizations with multiple build stations where a shared signing resource is advantageous.
• Enterprise. This code signing solution is designed for larger organizations with requirements for highly controlled software signing approval process workflows with robust end-to-end audit capabilities.