Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Keyfactor Signum ensures the safeguarding of sensitive keys, automates policy enforcement, and seamlessly integrates signing processes with your existing tools and build workflows. It allows for the generation and secure storage of private signing keys within a centralized, FIPS 140-2 certified hardware security module (HSM) hosted in the cloud. You can establish detailed access and usage policies for these private keys while also authenticating users and build servers involved in the signing process, all accompanied by a comprehensive audit trail. The solution works with platform-native signing tools to maintain the security of private signing keys without disrupting existing workflows. Additionally, it facilitates integration with signing tools through lightweight agents compatible with Windows and Linux, which can be quickly deployed on build servers or developer workstations. Furthermore, Keyfactor Signum generates key attestation to meet CA/B forum standards, ensuring that keys are both created and stored within an HSM, thereby enhancing security and compliance. This robust system not only streamlines the signing process but also significantly reduces the risk of key compromise.
Description
The jarsigner utility serves a dual function: it authenticates the signatures and verifies the integrity of signed JAR files while also enabling the signing of Java Archive (JAR) files. A digital signature consists of a sequence of bits derived from the data being signed along with the private key of a specific entity, which could be an individual or a corporation, among others. Much like a handwritten signature, a digital signature possesses several beneficial properties; its authenticity can be confirmed through a calculation that employs the public key linked to the private key used for generating that signature. Furthermore, it is intrinsically tied to the signed data, meaning it cannot validly represent a signature for different data, and any alteration to the signed data renders the signature unverifiable as genuine. This mechanism ensures that it cannot be counterfeited, provided that the private key remains confidential, thereby enhancing security in digital transactions and communications.
API Access
Has API
No
API Access
Has API
No
Integrations
Google
Yes
Java
Yes
Jenkins
Yes
Microsoft Azure
Yes
Okta
Yes
OpenSSL
Yes
Visual Studio
Yes
Integrations
Google
No
Java
No
Jenkins
No
Microsoft Azure
No
Okta
No
OpenSSL
No
Visual Studio
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Keyfactor
Founded
2001
Country
United States
Website
www.keyfactor.com/products/signum/
Vendor Details
Company Name
Oracle
Founded
1977
Country
United States
Website
docs.oracle.com/javase/7/docs/technotes/tools/windows/jarsigner.html