Audience
Developers in need of a secure digital signing solution to protect the integrity of code, containers, and software
About Keyfactor Signum
With Keyfactor Signum, sensitive keys are protected, policy is automated, and signing is integrated with your tools and build processes. Generate and store sensitive private signing keys in a centralized, FIPS 140-2 certified hardware security module (HSM) in the cloud. Define granular access and usage policies for private signing keys, and authenticate users and build servers for signing with a full audit trail. Integrate with platform-native signing tools to protect access to private signing keys, without changing workflows. Integrate with signing tools via lightweight Windows and Linux agents that are quick to install on build servers or developer workstations. Generate key attestation to comply with CA/B forum requirements to verify that keys are stored and generated in an HSM.
Other Popular Alternatives & Related Software
SignServer Enterprise
One flexible platform that supports all your electronic signature use cases. Integrates with your business applications via standard interfaces. Deploy SignServer as it suits your needs - either as a turn-key software or hardware appliance or in the cloud. The SignServer platform covers all your signing use cases in one solution, including standard document signing, eIDAS advanced signing and seal, code signing for multiple formats, timestamping services and ICAO ePassport signing. Avoid managing a myriad of signing solutions and centralize all your signature processes in this multitenant solution and improve on security policy compliance. Server-side signature solutions give maximum control and security and allow you to leverage your hardware security module (HSM) investment in the best way. Signature keys are generated and used for signing in your HSM. SignServer supports most HSMs on the market - and both short-lived keys, and keys or certificates with a longer lifecycle.
Learn more about SignServer Enterprise
SignPath
In times of growing cyber security breaches, platform vendors and customers require all deployed applications to be digitally signed. Code signing is the only way to guarantee that software has not been modified by a third party. The corporate solutions of SignPath enable DevOps teams to seamlessly integrate code-signing into their development lifecycle and empowers InfoSec teams to define secure policies and gain transparency over private key usage. Frequent software releases and updates, the popularity of microservices as well as stricter enforcement of internal security measures have increased the complexity for code signing. SignPath is made for developers from one of the leading European software development companies for government institutions. We automate security best practices to keep your development process agile.
Learn more about SignPath
CodeSign Secure
Our platform guarantees unmatched security and high performance for all your cryptographic needs, ensuring the integrity and authenticity of your software. CodeSign Secure provides advanced insights, cloud-based HSM key management, and policy enforcement for robust practices. Experience seamless integration with Dev Ops CI/CD and streamlined workflows for hands-free code signing.
Learn more about CodeSign Secure
jarsigner
The jarsigner tool has two purposes, to verify the signatures and integrity of signed JAR files and to sign Java Archive (JAR) files. A digital signature is a string of bits that is computed from some data (the data being signed) and the private key of an entity (a person, company, and so on). Similar to a handwritten signature, a digital signature has many useful characteristics, its authenticity can be verified by a computation that uses the public key corresponding to the private key used to generate the signature, it is a function of the data signed and thus cannot be claimed to be the signature for other data as well, the signed data cannot be changed. If the data is changed, then the signature cannot be verified as authentic and It cannot be forged, assuming the private key is kept secret.
Learn more about jarsigner
Integrations
Company Information
Keyfactor
Founded: 2001
United States
www.keyfactor.com/products/signum/
Videos and Screen Captures
Other Useful Business Software
Endpoint Management with Remote Control Built In
Save 50% on your first year when you switch from your existing RMM to Splashtop AEM. Automate patching, track inventory, and jump directly into 1-click unattended remote sessions without switching tools.
Product Details
Platforms Supported
Cloud
Training
Documentation
Live Online
Webinars
Support
Phone Support
Online
Keyfactor Signum Frequently Asked Questions
Q: What kinds of users and organization types does Keyfactor Signum work with?
Keyfactor Signum works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Keyfactor Signum support in their product?
Keyfactor Signum supports these languages: English.
Q: What kind of support options does Keyfactor Signum offer?
Keyfactor Signum offers support via phone support and online.
Q: What other applications or services does Keyfactor Signum integrate with?
Keyfactor Signum integrates with: Microsoft Azure, Google, Java, Jenkins, Okta, OpenSSL, and Visual Studio.
Q: What type of training does Keyfactor Signum provide?
Keyfactor Signum provides training in the form of documentation, live online, and webinars.
