How do I use my EV Code Signing certificate to sign files?

To sign files with your EV Code Signing certificate, simply plug the token into your computer, follow your software's steps for signing code, and enter your YubiKey PIN. • For instructions on using Microsoft SignTool and SSL Manager with your EV Code Signing certificate, please refer to our how-to, Using Your Code Signing Certificate . • For instructions on using your EV code signing certificate with Java, please refer to our Java Code Signing Guide .

How do I use my EV Code Signing certificate to sign Windows drivers?

Signing kernel-mode and user-mode drivers in Windows 10 requires registration with the Windows Hardware Dev Center program. After you sign your driver with your EV certificate, it must be submitted to the Hardware Dev Center for signing by Microsoft. For complete information, please refer to Microsoft’s documentation: • Kernel-Mode Code Signing Requirements • Get started with the hardware dashboard program • Register for the Hardware Program

Can I install a document signing or S/MIME certificate on my YubiKey?

Yes! The 3.0 release of SSL.com’s SSL Manager lets Windows users securely generate key pairs, order EV Code Signing and Business Identity certificates, and install certificates directly on their YubiKey from the application . You can also generate key pairs and manage certificates on your YubiKey with Windows, macOS, and Linux computers via Yubico’s YubiKey Manager application. For more information, please read Key Generation and Attestation with Yubikey .

How do I enroll in eSigner with my EV Code Signing Certificate?

EV Code Signing certificate users can also use their certificate for hardware-free volume signing, team sharing, and CI/CD automation using the eSigner cloud signing platform. After ordering your EV Code Signing certificate, you can navigate to the user portal and begin the process there. Get more details on the process in this helpful guide .

FAQ: Getting Started With Your Code Signing Certificate

SSL.com Support Team

1 year ago

Now that you’ve received a new Yubikey Token or Thales SafeNet (Gemalto) token containing your Code Signing certificate, you may be wondering just what to do next. This FAQ answers common questions you may have about how to get started with your new certificate and USB token.

Effective March 1, 2026, new industry requirements from the CA/Browser Forum will limit the maximum validity period of publicly trusted code signing certificates to 458 days. In preparation, SSL.com began enforcing this 458-day cap on certificate issuance starting February 27, 2026. This change does not affect the total purchased term of a customer’s order, but individual certificates issued within that term may need to be reissued more frequently. Customers will still receive the full value of their purchase, even though each certificate will have a shorter lifespan. This update is mandatory across all publicly trusted certificate authorities and is designed to enhance security by reducing risk exposure and improving cryptographic agility.

Your Code Signing certificate is also capable of hardware-free volume signing, team sharing, and CI/CD automation using the eSigner cloud signing platform. SSL.com’s eSigner cloud signing service allows you to easily apply globally trusted digital signatures and timestamps to your code from anywhere, without the need for USB tokens, HSMs, or any special hardware. To enroll for eSigner with your Code Signing certificate visit the enrollment how-to or visit the overview page for more information about the eSigner platform.

SSL.com’s EV Code Signing certificates offer Windows 10 kernel-mode code signing and an instant SmartScreen reputation boost, all for as low as $240.00 per year. They are delivered on secure FIPS 140-2 validated security key USB tokens with two-factor authentication.

ORDER NOW

How do I use my Code Signing certificate to sign files?

To sign files with your Code Signing certificate, simply plug the token into your computer and refer to this SSL.com article: Using Your Code Signing Certificate. Instructions will vary depending on the token or tool that you have.

For instructions on using Microsoft SignTool with your Yubikey token, please refer to the section titled: Signing an Executable with Yubikey.
For instructions on using Microsoft SignTool with your Thales SafeNet (Gemalto) token, please refer to the section titled: Code Signing with a Thales SafeNet (Gemalto) USB token
For instructions on using Microsoft SignTool and SSL Manager with your Code Signing certificate, please refer to the section titled, Signing an Executable with SSL Manager.
For instructions on using your code signing certificate with Java, please refer to our Java Code Signing Guide.

How do I enroll in eSigner with my Code Signing Certificate?

After ordering your Code Signing certificate, you can navigate to the user portal and begin the process there. Get more details on the process in this helpful guide.

Code Signing certificate users can also use their certificate for hardware-free volume signing, team sharing, and CI/CD automation using the eSigner cloud signing platform. Find out more with this SSL.com article: Cloud Code Signing Automation with CI/CD Services.

Users can sign code with eSigner’s Extended Validation Code Signing capability. Click below for more info.

LEARN MORE

Thank you for choosing SSL.com! If you have any questions, please contact us by email at Support@SSL.com, call 1-877-SSL-SECURE, or just click the chat link at the bottom right of this page. You can also find answers to many common support questions in our knowledgebase.