I am just trying to wrap my head around how this works compared to the “traditional” code signing we have been doing for years now.
We are windows based software so i figured this was the best place. While renewing our code signing certificate, we found out that they are requiring HSM’s for the certs now with EV Code Signing. We have 30+ builds that run nightly on virtual machines, is this going to mean we have to have 30 of these HSM’s now? Or are we going to have to setup a single machine that all the code has to be sent to for signing? I wish we had known prior to now so we could have gotten a 3 year cert.