31 questions
-2
votes
1
answer
76
views
Signing XML using PKCS11, HSM token
public static byte[] DoSignXML_old(string inputfile, HSMProperties pro, ref ISession session)
{
try
{
// Load the XML document
XmlDocument XDoc = new XmlDocument();
...
1
vote
1
answer
136
views
Authenticode Signing speed on Windows: Token vs. Cloud?
Background
I am in the process of migrating our CI Code Signing from a Windows Cert Store based Cert/Private Key to an Token based solution (since Tokens or Cloud are 2025 the only solutions offered - ...
- 39.4k
0
votes
1
answer
459
views
How to install the Sentinel LDK Run-time Environment (RTE) within a Docker container
When I was compiling the Docker image, an error occurred, as shown below
[root@3e8a57de9554 ~]# rpm -ivh aksusbd-10.11-1.aarch64.rpm
Verifying... #############################...
- 1
1
vote
0
answers
581
views
Unable to verify_certificates for login authentication using Safenet eToken 5110 and self-signed cert
I'm trying to configure the SafeNet eToken 5110 for 2FA login authentication on RHEL7.9.
Operating System: RHEL Workstation 7.9
SafeNet Authentication Client 10.7.77.0
My system is air-gapped, and ...
- 11
2
votes
3
answers
3k
views
Code-Signing Windows EXE with Sectigo Hardware Token (SafeNet Authentication Client) on Ubuntu 22.04 Using PKCS11 Tools and osslsigncode
I am able to sign my Windows EXEs on Windows using SAC and singtool.exe. But this requires a Windows machine which I don't have readily available access to. I primarily work on Linux and the Sectigo ...
- 4,163
0
votes
1
answer
1k
views
USB Token EV Codesigning fails under Windows 11 / VSTO /
What I want to achieve?
Code sign my VSTO Outlook Plugin using Visual Studio 2022. I follow these instructions: https://learn.microsoft.com/en-us/visualstudio/vsto/how-to-sign-office-solutions?view=vs-...
- 5,094
11
votes
1
answer
5k
views
Avoiding repeated password prompt when signing with EV code signing certificate on a SafeNet Thales token
I have a Thales SafeNet token with an EV code signing certificate.
To sign an executable I use signtool in a command line:
signtool sign /tr "http://timestamp.digicert.com" /td sha256 /fd ...
- 3,803
0
votes
1
answer
824
views
Establish SSL/TLS Connection using Certificate present in Thales Luna HSM
I am trying to setup a Netty Server with HTTPS enabled. In order to establish the SSL/TLS connections, I need to fetch the certificiate from Safenet Luna Network HSM and pass that Cert to Netty's SSL ...
5
votes
1
answer
1k
views
How is SafeNet eToken 5110 different from SafeNet eToken 5100?
My EV code signing certificate is expiring, and I'm thinking about changing provider. However the new provider(Trust zone) is providing a SafeNet eToken 5100, the one I have now is a SafeNet eToken ...
- 51
0
votes
1
answer
1k
views
Unable to use Private Key from HSM to decrypt message
I am trying to decrypt a message that has been encrypted with our public key, using Private Key stored on Luna HSM as under:
Connecting To HSM:
private void connectToHSM() throws Exception {
try {
...
- 1
1
vote
1
answer
234
views
Registry createSubKey under LocalMachine
When I try to apply these codes like below, It doesnt get an success result when I check the subdirectory SOFTWARE\Safenet\PTKC\WLD. Is there anybody what is the reason of this issue.
RegistryKey ...
- 11
0
votes
0
answers
81
views
Hyperledger fabric peer connection with HSM fails randomly after running for a while
Good day,
We have an integration between an HSM Luna 6.3 and Hyperledger Fabric, we use Luna to store the private keys of peers and orderers. The integration works fine but after a while running we ...
- 1,891
2
votes
0
answers
335
views
CryptokiError: 0x60 key handle invalid
We are using Safenet PTK 4.2
Recently we are encountering this error intermittently:
Caused by: java.security.InvalidKeyException: CryptokiError: 0x60 key handle invalid at au.com.safenet.crypto....
- 21
2
votes
2
answers
2k
views
How to decrypt safeNet wrapped exported keys?
I have exported a 3DES key from my SafeNet HSM to a file using a tool named KMU. This tool wraps the key before extraction using another 3DES key. I have access to the plain-text value of the second ...
- 6,214
0
votes
2
answers
2k
views
Windows 10 EV code signing no longer works on electron app
I have an electron app. Pretty basic app. It doesn't use ffmpeg for anything it does play an mp3 chime from time to time. I build my app with electron-forge using squirrel format. I then sign it ...
- 41
168
votes
14
answers
74k
views
Automate Extended Validation (EV) code signing with SafeNet eToken
We recently purchased a DigiCert EV code signing certificate. We are able to sign .exe files using signtool.exe. However, every time we sign a file, it prompts for the SafeNet eToken password.
...
- 8,131