Re: [Opensc-devel] OpenSC minidriver and Windows Authenticode certificates

[Andreas S. <and...@ca...>]

Dear Marco,

the SmartCard-HSM only supports encrypted key import for security
reason. This will not work with tools provided by OpenSC.

We generally advice users to generate keys on the device and use the
backup/restore facility for important keys. This ensures proper access
control to key material and ensures secrecy even while keys are in transit.

The SmartCard-HSM SDK contains a script to import RSA keys from PKCS#12
files into a SmartCard-HSM. The SDK is a commercial product, but if you
need just the script, then that will be available for free under NDA.

Please send me a pm, so we can get that sorted out.

Andreas

On 05/07/2015 03:49 PM, Marco Giuliani wrote:
> Hello,
> I just got a smartcard-HSM and I wanted to use it to store my code signing certificate used for usermode and kernelmode Authenticode code signing. I have a PFX file right now, containing the public+private key and I saw that signtool.exe can use CSP to sign PE files. 
> Did anybody try storing the code signing certificate into a HSM like Smartcard-HSM through OpenSC and using it for code signing?
> Does anybody know how to properly do it? Like how to convert the PFX in something I can import to the HSM?
> Thanks for your support!
> Marco 		 	   		  
> 
> 
> 
> ------------------------------------------------------------------------------
> One dashboard for servers and applications across Physical-Virtual-Cloud 
> Widest out-of-the-box monitoring support with 50+ applications
> Performance metrics, stats and reports that give you Actionable Insights
> Deep dive visibility with transaction tracing using APM Insight.
> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
> 
> 
> 
> _______________________________________________
> Opensc-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
> 


-- 

    ---------    CardContact Software & System Consulting
   |.##> <##.|   Andreas Schwier
   |#       #|   Schülerweg 38
   |#       #|   32429 Minden, Germany
   |'##> <##'|   Phone +49 571 56149
    ---------    http://www.cardcontact.de
                 http://www.tscons.de
                 http://www.openscdp.org
                 http://www.smartcard-hsm.com