Code signing to protect your applications

Given the prevalence of malware and Advanced Persistent Threats (APTs), many software vendors, providers of online services, and enterprise IT organizations are under pressure to increase the security of their code signing process. The nCipher Code Signing solution helps software producers of all types implement highly secure and efficient code signing processes that protect their organizations from risks associated with software tampering. Combining tamper-resistant nShield HSMs with support from nCipher Professional Services (PS), the nCipher Code Signing solution is backed by our extensive expertise in code signing best practices and standards of due care. HSMs provide tamper-resistant, certified protection for private code signing keys and a secure platform to perform critical digital signature processes. nCipher Code Signing also offers a flexible range of capabilities to simplify and automate the code signing request/approval workflow for organizations with more complex requirements.

Each nCipher Code Signing solution includes one or more nShield HSMs, the nCipher Code Signing framework, and service days appropriate to your specific requirements. nCipher PS will design and configure your solution to support your specific code signing workflow. nCipher Code Signing is offered in three configurations:

  • Developer. This code signing solution is designed for the individual developer workstation for low volumes of code signing.
  • Workgroup. This code signing solution is designed for organizations with multiple build stations where a shared signing resource is advantageous.
  • Enterprise. This code signing solution is designed for larger organizations with requirements for highly controlled software signing approval process workflows with robust end-to-end audit capabilities.
image description

Quick implementation

Get a high-assurance code signing process appropriate to your organization’s size and scope.

image description

Secure

Maximize protection from outsider and insider attacks with a tamper-resistant code signing solution.

image description

Automated solution

Simplify and streamline the code signing process using workflow automation capabilities.

Additional Resources

Solution Brief : nCipher Code Signing

In addition to enhanced code signing key security, the nCipher Code Signing solution offers a flexible range of automation capabilities for code signing approval processes as well as for centralized cryptographic key management. The nCipher Code Signing solution is unique in that it not only provides a high assurance method to protect private code signing keys in certified secure hardware, but also offers a flexible range of capabilities to simplify and automate the code signing request/approval workflow for organizations with more complex environments.

Download

Data Sheet : Code Signing Gateway

The Code Signing Gateway Service provides a range of flexible and centralized workflow automation functions that helps organizations successfully meet secure code signing requirements. The Code Signing Gateway is a customer hosted server that runs an nCipher code signing application and is complemented by onsite installation and training delivered by nCipher Professional Services.

Download

White Paper : Establishing Trust and Integrity with Code Signing

Code signing provides critical authentication capabilities to security-sensitive software and applications. Download our whitepaper to learn about the technology underlying secure code signing, including the critical role played by hardware security modules and the steps developers can take to build a high assurance code signing process.

Download
Want to be part of our team? Explore
Get in contact with a specialist Contact Us