Skip to content
SPECIFICTION
Get listed

Code Signing Key Management Server (CSKMS)

certicom.com

APISelf-hosted
Visit certicom.com
Spec score 7.4 #19 of 28 in Code Signing Software

Spec sheet

Purpose
CSKMS manages access to code-signing and encryption keys, signs software images, and can optionally encrypt them for target projects.Read 10 Oct 2026 · certicom.com
Intended users
Certicom describes the server as a solution for manufacturers protecting device software and firmware, including critical-infrastructure, industrial-control, aerospace, military, telecommunications, transportation, and connected-car applications.Read 10 Oct 2026 · certicom.com
Deployment
It can run offline in an isolated security bunker, where security officers present tokens to access restricted project keys, or connect through secure web services for automated signing.Read 10 Oct 2026 · certicom.com
Integrations
It provides a RESTful API for code-signing clients and offers custom integration services.Read 4 Oct 2026 · certicom.com
Support
Certicom lists Standard and Premium support options; Premium support includes 7×24 hours and a stated response time of one business hour to one business day on its support-offerings page.Read 10 Oct 2026 · certicom.com
Founded
1985Read 28 Sep 2026 · certicom.com
Access controls
Signing keys can be administered using key groups and user permissions, with M-of-N hardware tokens for administration and control.Read 4 Oct 2026 · certicom.com
Additional features
The datasheet lists WebAuthn remote-token support, signing-key administration with key groups and user permissions, and certificate self-signing or CSR export.Read 10 Oct 2026 · certicom.com
Administration and audit
The product page says CSKMS securely logs key usage and metadata.Read 10 Oct 2026 · certicom.com
Algorithms
It supports RSA, ECDSA, and quantum-resistant digital signatures, plus NIST-approved key derivation, encryption, and key-wrapping algorithms with selectable bit strengths.Read 10 Oct 2026 · certicom.com
Audit logging
The server logs signatures and associated metadata, and the datasheet describes an audit trail of users or applications that used protected keys.Read 4 Oct 2026 · certicom.com
Custom integration
The datasheet says custom integration services are available.Read 10 Oct 2026 · certicom.com
Deployment hardware
The datasheet describes a hardened server appliance with a CentOS 7-based secure operating environment.Read 4 Oct 2026 · certicom.com
Encryption
The KMS supports AES key management for file encryption and key wrapping, as well as MAC-based image authentication.Read 4 Oct 2026 · certicom.com
Hardware security
The server uses FIPS 140-2 certified hardware security modules to protect sensitive keying material.Read 10 Oct 2026 · certicom.com
Integration
Web-service APIs support integration with backend over-the-air services and device-provisioning systems, including Certicom’s Asset Management System.Read 10 Oct 2026 · certicom.com
Key permissions
It manages signing privileges for key sets and authorized user groups.Read 10 Oct 2026 · certicom.com
Key protection
The datasheet says keys are protected in a FIPS 140-2 Level 3 physical HSM.Read 4 Oct 2026 · certicom.com
Maker history
Certicom says it was founded in 1985 and acquired by BlackBerry in 2009.Read 10 Oct 2026 · certicom.com
Signature algorithms
The datasheet lists RSA, ECDSA, LMS, XMSS and Dilithium digital signatures.Read 4 Oct 2026 · certicom.com
Signing options
The datasheet states that the server can sign a precomputed hash or compute and sign a hash from a presented file image, logging the signature and metadata.Read 10 Oct 2026 · certicom.com

Where Specifiction places it

Alternatives to Code Signing Key Management Server (CSKMS)All alternatives →