The CA/Browser Forum’s EV Code Signing Guidelines stipulate that Certificate Authorities must protect private keys in FIPS 140-2 certified cryptographic modules, such as a HSM. In addition, section 16 parts 3a and 4b specify that there must be a mechanism for validating that a private key is indeed protected by…

This blog post outlines the procedure to use the DPoD HSM on Demand service to carry out bring your own key for AWS. Overview The process comprises of the following operations Generate an external key in AWS Create a key Import token: ensures the import has to be done in…

Thales is pleased to announce the introduction of additional tiles to the DPoD Marketplace. Partner tiles provide direct links to Thales Partners who offer solutions integrated with the DPoD platform. Newly Introduced Tiles Keyfactor Code Assure Keyfactor Code Assure centralizes code signing operations into a single intuitive platform. Developers can…

Interfacing with the Luna HSM and the Luna Cloud HSM service provided by DPoD requires a package called PKCS11js. The file index.d.ts provides a complete Javascript/Typescript API definition. A discussion of the full API is not presented here, however, index.d.ts is maintained by the pkcs11js author(s) and thus one should…