Profiles

Authenticode and nCipher hardware products

nCipher hardware provides a trusted system for protecting the credentials of the software publisher used by Authenticode during code publication. These credentials comprise the code signing key, the Time Stamp Authority (TSA) key the Time Attributes and the respective certificates.

• nCipher’s nShield or netHSM can be used to secure the code signing key within an industry standard FIPS 140-2 level 3 validated Hardware Security Module (HSM). Managing these keys in hardware removes them from vulnerable servers, protecting them from key finding attacks
• The nCipher DSE 200 provides a secure Authenticode time stamp service, protecting the Time Stamp Authority key, the Time Stamp Authority (TSA) Certificate and the Time Attribute Certificate (TAC) that attests to the calibration of time within the DSE200. These credentials are protected within the confines of a FIPS 140-2 level 3 HSM.