2 ms·
You can use a cloud HSM and some CAs offer cloud signing. We described some info about setting that up with our tool in this blog post (it talks about Electron
by mike_hearn 3y ago
You can use a cloud HSM and some CAs offer cloud signing. We described some info about setting that up with our tool in this blog post (it talks about Electron but the instructions work for any kind of app):
https://www.hydraulic.dev/blog/21-shipping-electron-apps-from-ci-using-hsm-certificates.html https://www.hydraulic.dev/blog/21-shipping-electron-apps-fro...
- kuschku 3y agoSo how do I get one of these with my colo'd machines?
- creatonez 3y agoSearch "FIPS hardware security module"
- mike_hearn 3y agoIf you have physical access to your own server you could just plug in the USB devices CAs sell you. The cloud HSMs/code signing services are more for people who don't have hardware access and have to rely on someone else's HSM accessed over the network.