CodeSign Secure Reviews

Keyfactor Signum ensures the safeguarding of sensitive keys, automates policy enforcement, and seamlessly integrates signing processes with your existing tools and build workflows. It allows for the generation and secure storage of private signing keys within a centralized, FIPS 140-2 certified hardware security module (HSM) hosted in the cloud. You can establish detailed access and usage policies for these private keys while also authenticating users and build servers involved in the signing process, all accompanied by a comprehensive audit trail. The solution works with platform-native signing tools to maintain the security of private signing keys without disrupting existing workflows. Additionally, it facilitates integration with signing tools through lightweight agents compatible with Windows and Linux, which can be quickly deployed on build servers or developer workstations. Furthermore, Keyfactor Signum generates key attestation to meet CA/B forum standards, ensuring that keys are both created and stored within an HSM, thereby enhancing security and compliance. This robust system not only streamlines the signing process but also significantly reduces the risk of key compromise.