Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Keyfactor Signum ensures the safeguarding of sensitive keys, automates policy enforcement, and seamlessly integrates signing processes with your existing tools and build workflows. It allows for the generation and secure storage of private signing keys within a centralized, FIPS 140-2 certified hardware security module (HSM) hosted in the cloud. You can establish detailed access and usage policies for these private keys while also authenticating users and build servers involved in the signing process, all accompanied by a comprehensive audit trail. The solution works with platform-native signing tools to maintain the security of private signing keys without disrupting existing workflows. Additionally, it facilitates integration with signing tools through lightweight agents compatible with Windows and Linux, which can be quickly deployed on build servers or developer workstations. Furthermore, Keyfactor Signum generates key attestation to meet CA/B forum standards, ensuring that keys are both created and stored within an HSM, thereby enhancing security and compliance. This robust system not only streamlines the signing process but also significantly reduces the risk of key compromise.

Description

The jarsigner utility serves a dual function: it authenticates the signatures and verifies the integrity of signed JAR files while also enabling the signing of Java Archive (JAR) files. A digital signature consists of a sequence of bits derived from the data being signed along with the private key of a specific entity, which could be an individual or a corporation, among others. Much like a handwritten signature, a digital signature possesses several beneficial properties; its authenticity can be confirmed through a calculation that employs the public key linked to the private key used for generating that signature. Furthermore, it is intrinsically tied to the signed data, meaning it cannot validly represent a signature for different data, and any alteration to the signed data renders the signature unverifiable as genuine. This mechanism ensures that it cannot be counterfeited, provided that the private key remains confidential, thereby enhancing security in digital transactions and communications.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Google
Java
Jenkins
Microsoft Azure
Okta
OpenSSL
Visual Studio

Integrations

Google
Java
Jenkins
Microsoft Azure
Okta
OpenSSL
Visual Studio

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Keyfactor

Founded

2001

Country

United States

Website

www.keyfactor.com/products/signum/

Vendor Details

Company Name

Oracle

Founded

1977

Country

United States

Website

docs.oracle.com/javase/7/docs/technotes/tools/windows/jarsigner.html

Product Features

Product Features

Alternatives

CodeSign Reviews

CodeSign

Aujas

Alternatives

CodeSign Secure Reviews

CodeSign Secure

Encryption Consulting LLC
SignTool Reviews

SignTool

Microsoft
apksigner Reviews

apksigner

Google