New answers tagged

2

When based on a standard, especially those as stringent as FIPS 140-2, you have to go through the following processes (which are time consuming and expensive): Design Testing Certification If you take a look at the NIST Implementation Guide for FIPS PUB 140-2, along with the other documents, you can search for the Level 4 implementation which detail that ...


0

To sign, you need the private key and the cert. It sounds like the private key is on the USB, but I can't be sure. Best practices is to keep the private key, well, to keep it very private. It is generally only stored on a single machine and an automated workflow is used to copy binaries to that machine for signing. That machine should be as vanilla as ...



Top 50 recent answers are included