About This Guide | Utimaco Integration Guides

This guide describes how to enable u.trust GP HSM integration with JSign.

Target Audience

This guide is intended for JSign and Utimaco GP HSM administrators.

Purpose of the Integration

The purpose of integrating JSign with Utimaco u.trust HSM is to enable secure Authenticode code signing by allowing JSign to use cryptographic keys stored and protected within the Utimaco HSM through the PKCS#11 interface. This integration ensures that private signing keys remain inside the HSM and are never exposed to the operating system or build environment, while providing a scalable, automated, and compliant solution for signing Windows executables.

Abbreviations

Abbreviation	Meaning
HSM	Hardware Security Module
PKI	Public Key Infrastructure
TDE	Transparent Data Encryption
PKCS	Public Key Cryptography Standards
PKCS#11	PKCS Part 11: The Cryptographic Token Interface Standard
SO	Security Officer
USR	Crypto User
DB	Database
JRE	Java Runtime Environment
JDK	Java Development Kit
JAR	Java Archive
MBK	Master Backup Key
P11CAT	PKCS#11 graphical interface tool
CXI	Cryptographic eXtended Interface
FIPS	Federal Information Processing Standards
CSR	Certificate Signing Request
CA	Certificate Authority
DLL	Dynamic Link Library
CAB	Cabinet File
SDK	Software Development Kit
PIN	Personal Identification Number
RSA	Rivest–Shamir–Adleman
CN	Common Name
DN	Distinguished Name
TSA	Time Stamp Authority
CLI	Command Line Interface
AIA	Authority Information Access
CRL	Certificate Revocation List
DER	Distinguished Encoding Rules
PEM	Privacy-Enhanced Mail

Abbreviations

Document Conventions

The following conventions are used in this guide:

Convention	Use	Example
Bold	Items of the Graphical User Interface (GUI), e.g., menu options	Press OK
`Monospaced`	Code that is given for explanation or as an example, file paths	`chsm-create`
Italic	References and important terms	See Sample Chapter in the CryptoServer - Sample Manual

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message indicates the expected result after the successful execution of an instruction.