- Home
- Code Signing Software
- Code Signing Key Management Server (CSKMS)
On the recordRead 10 Oct 202621 facts
Code Signing Key Management Server (CSKMS)
On the record
- Access controls
- Signing keys can be administered using key groups and user permissions, with M-of-N hardware tokens for administration and control.certicom.com · read 4 Oct 2026
- Additional features
- The datasheet lists WebAuthn remote-token support, signing-key administration with key groups and user permissions, and certificate self-signing or CSR export.certicom.com · read 10 Oct 2026
- Administration and audit
- The product page says CSKMS securely logs key usage and metadata.certicom.com · read 10 Oct 2026
- Algorithms
- It supports RSA, ECDSA, and quantum-resistant digital signatures, plus NIST-approved key derivation, encryption, and key-wrapping algorithms with selectable bit strengths.certicom.com · read 10 Oct 2026
- Audit logging
- The server logs signatures and associated metadata, and the datasheet describes an audit trail of users or applications that used protected keys.certicom.com · read 4 Oct 2026
- Custom integration
- The datasheet says custom integration services are available.certicom.com · read 10 Oct 2026
- Deployment
- It can run offline in an isolated security bunker, where security officers present tokens to access restricted project keys, or connect through secure web services for automated signing.certicom.com · read 10 Oct 2026
- Deployment hardware
- The datasheet describes a hardened server appliance with a CentOS 7-based secure operating environment.certicom.com · read 4 Oct 2026
- Encryption
- The KMS supports AES key management for file encryption and key wrapping, as well as MAC-based image authentication.certicom.com · read 4 Oct 2026
- Hardware security
- The server uses FIPS 140-2 certified hardware security modules to protect sensitive keying material.certicom.com · read 10 Oct 2026
- Integration
- Web-service APIs support integration with backend over-the-air services and device-provisioning systems, including Certicom’s Asset Management System.certicom.com · read 10 Oct 2026
- Integrations
- It provides a RESTful API for code-signing clients and offers custom integration services.certicom.com · read 4 Oct 2026
- Intended users
- Certicom describes the server as a solution for manufacturers protecting device software and firmware, including critical-infrastructure, industrial-control, aerospace, military, telecommunications, transportation, and connected-car applications.certicom.com · read 10 Oct 2026
- Key permissions
- It manages signing privileges for key sets and authorized user groups.certicom.com · read 10 Oct 2026
- Key protection
- The datasheet says keys are protected in a FIPS 140-2 Level 3 physical HSM.certicom.com · read 4 Oct 2026
- Maker history
- Certicom says it was founded in 1985 and acquired by BlackBerry in 2009.certicom.com · read 10 Oct 2026
- Purpose
- CSKMS manages access to code-signing and encryption keys, signs software images, and can optionally encrypt them for target projects.certicom.com · read 10 Oct 2026
- Signature algorithms
- The datasheet lists RSA, ECDSA, LMS, XMSS and Dilithium digital signatures.certicom.com · read 4 Oct 2026
