Questions tagged [safenet]
30 questions
128
votes
13 answers
Automate Extended Validation (EV) code signing with SafeNet eToken
We recently purchased a DigiCert EV code signing certificate. We are able to sign .exe files using signtool.exe. However, every time we sign a file, it prompts for the SafeNet eToken password.
How can we automate this process, without user…

decasteljau
- 7,655
- 10
- 41
- 58
3
votes
1 answer
How is SafeNet eToken 5110 different from SafeNet eToken 5100?
My EV code signing certificate is expiring, and I'm thinking about changing provider. However the new provider(Trust zone) is providing a SafeNet eToken 5100, the one I have now is a SafeNet eToken 5110.
My questions are these:
What are the…

DaniFlex
- 31
- 5
2
votes
1 answer
Avoiding repeated password prompt when signing with EV code signing certificate on a SafeNet Thales token
I have a Thales SafeNet token with an EV code signing certificate.
To sign an executable I use signtool in a command line:
signtool sign /tr "http://timestamp.digicert.com" /td sha256 /fd sha256 /as /n "CERTIFICATE NAME ON TOKEN" /v…

Coder12345
- 3,431
- 3
- 33
- 73
2
votes
3 answers
install4j: Automating Windows Extended Validation Code Signing and Apple Notarization on the same machine?
We are considering to switch to an extended validation (EV) code signing certificate.
In order to fully automate the notarization with Apple, we had to switch our build machine to a Mac mini.
Reading up on the EV code signing process, and how to…

Reto Höhener
- 5,419
- 4
- 39
- 79
2
votes
2 answers
How to get number of password retries in eToken SafeNet by IAIK PKCS#11
I use Java and IAIK to read eToken info.
Module pkcs11Module = Module.getInstance("PKCS11.dll");
pkcs11Module.initialize(null);
Slot[] slotsWithToken = pkcs11Module.getSlotList(Module.SlotRequirement.TOKEN_PRESENT);
log.info("number of…

htan
- 79
- 6
2
votes
0 answers
Automate (EV) code signing with Certum Certificate
I just switched from a DigiCert EV Code Signing Token (that was using the Safenet Client), to a Certum certificate.
Everything was automated (for the Digicert Token) with the help of this little tool https://www.nuget.org/packages/SafenetSign/
The…

SBlackheart
- 41
- 4
1
vote
1 answer
Importing private key in Safenet dongle 5110
I am trying to import a base64 representation of private key into safenet dongle.
Example Private key:
-----BEGIN RSA PRIVATE…

desertSniper87
- 795
- 2
- 13
- 25
1
vote
1 answer
Registry createSubKey under LocalMachine
When I try to apply these codes like below, It doesnt get an success result when I check the subdirectory SOFTWARE\Safenet\PTKC\WLD. Is there anybody what is the reason of this issue.
RegistryKey Location =…

Cihan Elibol
- 13
- 3
1
vote
0 answers
CryptokiError: 0x60 key handle invalid
We are using Safenet PTK 4.2
Recently we are encountering this error intermittently:
Caused by: java.security.InvalidKeyException: CryptokiError: 0x60 key handle invalid at au.com.safenet.crypto.provider.BlockCipher.rekey(BlockCipher.java:446) …

skeng
- 11
- 1
1
vote
1 answer
How to decrypt safeNet wrapped exported keys?
I have exported a 3DES key from my SafeNet HSM to a file using a tool named KMU. This tool wraps the key before extraction using another 3DES key. I have access to the plain-text value of the second key.
The question is "how can I decrypt the…

Ebrahim Ghasemi
- 5,850
- 10
- 52
- 113
0
votes
0 answers
osslsigncode Sign with Hardware Token issue (Failed to set 'dynamic' engine)
I'm trying to sign EXE files with osslsigncode, my cert and key are on a Safenet Hardware token which the system is able to read :
:~# pkcs11-tool --module /usr/lib/pkcs11/libeToken.so --login --list-objects --id 01
Using slot 0 with a present token…

Ben74
- 11
- 3
0
votes
0 answers
Using a qualified seal certificate issued on a SafeNet token for unattended operations in Java
As part of a larger project, a test module has been developed and is intended to be integrated into a tomcat-based Java webapp for unattended signing of large batches of documents using a qualified seal certificate that can be issued only on SafeNet…

stefanu
- 197
- 2
- 13
0
votes
1 answer
USB Token EV Codesigning fails under Windows 11 / VSTO /
What I want to achieve?
Code sign my VSTO Outlook Plugin using Visual Studio 2022. I follow these instructions: https://learn.microsoft.com/en-us/visualstudio/vsto/how-to-sign-office-solutions?view=vs-2022
Environment
Windows 11 (German), Visual…

HHeckner
- 4,722
- 4
- 23
- 33
0
votes
0 answers
Importing pfx/p12 file into smartcard using swift/Objective C
Is there any way to import PFX/p12 file to smartcard programmatically using swift/Objective C?
Actually, I am able to extract the certificate from certificate chain(.p7b). Then instead of saving the certificate into mac's keychain, i want to import…

ahad alam
- 69
- 7
0
votes
0 answers
Getting CKR_TEMPLATE_INCONSISTENT while importing certificate programmatically
I want to programmatically import certificate to safenet dongle. I want to do it in a swift application.
below is my code.
void Dongle::importCertificate(char *password, char* enrollmentId, unsigned char * subject, unsigned char * issuer, unsigned…

ahad alam
- 69
- 7