Code Signing Key Management Server (CSKMS)

Self-hosted

Freedom report

One barScore 5.3

Code Signing Key Management Server (CSKMS) is ranked #13 of 26 in code signing software on Freedom251. It runs on Self-hosted.

Compared on code signing software

Supported targets: firmware, software applications, software images, block images, hash fingerprints
HSM key protection: Yes
CI/CD signing: Yes

Purpose: The server protects code-signing keys and signs software images for device firmware and applications.
Intended users: BlackBerry Certicom says the product enables IC manufacturers and OEMs to sign and secure device software.
Signature algorithms: The datasheet lists RSA, ECDSA, LMS, XMSS and Dilithium digital signatures.
Signing options: It can sign a precomputed hash or compute and sign a hash from a presented file image.
Encryption: The KMS supports AES key management for file encryption and key wrapping, as well as MAC-based image authentication.
Integrations: It provides a RESTful API for code-signing clients and offers custom integration services.
Access controls: Signing keys can be administered using key groups and user permissions, with M-of-N hardware tokens for administration and control.
Key protection: The datasheet says keys are protected in a FIPS 140-2 Level 3 physical HSM.
Audit logging: The server logs signatures and associated metadata, and the datasheet describes an audit trail of users or applications that used protected keys.
Deployment hardware: The datasheet describes a hardened server appliance with a CentOS 7-based secure operating environment.
Maker history: Certicom says it was founded in 1985 and acquired by BlackBerry in 2009.
Founded: 1985

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.