Knowledge Base

SafeNet Authentication Client Download for Sectigo Certificates on eToken

Overview 

By the end of this article, you will have the SafeNet Authentication Client (SAC) installed on your computer and your Sectigo eToken ready to use for signing. SAC is the middleware that lets your operating system communicate with the eToken hardware that stores your Sectigo certificate and private key. This article covers which SAC package to download for your operating system, the prerequisites you need, how to install the client, and how to verify success. It applies to Sectigo Extended Validation (EV) Code Signing, Document Signing, and eIDAS Qualified certificates supplied on an eToken. 

What is the SafeNet Authentication Client? 

The SafeNet Authentication Client (SAC) is middleware software that lets your computer recognize and communicate with a SafeNet eToken — the secure Universal Serial Bus (USB) hardware device that stores your Sectigo certificate and private key. You must install SAC before your operating system can use the certificate on the token for code signing or document signing. 

 

Prerequisites 

A Sectigo certificate already provisioned on a SafeNet eToken. 

The eToken hardware (a USB device or a Common Access Card). 

Administrator rights on the computer where you install the client. 

Follow these steps to download and install SafeNet Authentication Client software for use with the following certificate types:

  • Sectigo EV Code Signing Certificate Token
  • Sectigo Document Signing Certificate Token
  • Sectigo eIDAS Qualified Certificate on eToken

 

The correct SAC download for your operating system (see the table below). 


Step 1 — Download the correct SafeNet Authentication Client for your operating system 

Download the current General Availability (GA) release that matches your operating system. Each download is a compressed .zip package that also includes the Release Notes and the User Guide. 
 

  Operating Systems      

  Download Link      

   Documentation      

  

 Windows Operating       Systems   
Following operating systems   are supported: 
> Windows 11 25H2 (64-bit) 
> Windows 11 24H2 (64-bit) 
> Windows 11 23H2 (64-bit) 
> Windows 11 22H2 (64-bit)> Windows 11 21H2 (64-bit) 
> Windows 10 22H2 (32-bit, 64-bit) 
> Windows 10 21H2 (32-bit, 64-bit) 
> Windows Server 2022 (64-bit) 
> Windows Server 2019 (64-bit) 
> Windows Server 2016 (64-bit) 
> Windows Server 2012 R2 (64-bit) 

SafeNet Authentication Client 10.9 R1 (GA) - Windows 

* Release Notes and User Guide, are both included in the     compressed zip file. 

 Windows Operating       Systems   
Following operating systems   are supported: 
> Windows Server 2022 (64-bit)     
> Windows Server 2019 (64-bit) 
> Windows Server 2016 (64-bit) 
> Windows Server 2012 and 2012 
    R2  (64-bit) 
> Windows 11 up to 22H2 
> Windows 10 (32-bit, 64-bit) up       to 21H2 
> Windows 8.1 (32-bit, 64-bit 
  

SafeNet Authentication Client 10.8.2716 R9-Windows 

 * Release Notes and User Guide, are both included in the     compressed zip file. 

Linux Operating Systems 
Following operating systems are supported: 
> Red Hat 8 and 9 
> CentOS 8 and 9 
> Fedora 34, 36, and 37 
> Ubuntu 20.04 and 22.04 
  

SAC 10.9 GA Linux  

* Release Notes and User Guide, are both included in the compressed zip file. 

Mac Operating Systems 
Following operating systems are supported: 
> macOS 12.1 (Monterey) 
> macOS 11.6.2 (Big Sur) 
> macOS 10.15.7 (Catalina) 
  

SafeNet Authentication Client 10.9 R2 GA Mac OS 

* Release Notes and User Guide, are both included in the compressed zip file. 

Operating Systems 
Following operating systems are supported: 
> Windows Server 2022 (64-bit) 
> Windows Server 2019 (64-bit) 
> Windows Server 2016 (64-bit) 
> Windows Server 2012 and 2012 R2 (64-bit) 
> Windows 11 up to 22H2 
> Windows 10 (32-bit, 64-bit) up to 21H2 
> Windows 8.1 (32-bit, 64-bit) 

SafeNet Minidriver 10.8 R9 GA 

* Release Notes and User Guide, are both included in the compressed zip file. 

 

 

If you need an alternative Windows package: 

SafeNet Minidriver 10.8 R9 (GA) — for smart-card minidriver scenarios on Windows Server 2012 R2–2022, Windows 11 (up to 22H2), Windows 10, and Windows 8.1. 

SafeNet Authentication Client 10.8.2716 R9 — a legacy client for older Windows versions, including Windows 8.1. 


Step 2 — Install the SafeNet Authentication Client (Windows) 

  1. Unplug your eToken from your device (this could be your USB device or Common Access Card (CAC) 
  1. Download the SafeNet Authentication Client (SAC) file on your Microsoft Windows computer. 
  1. Run the MSI installer. Double click on the file "SafeNetAuthenticationClient-x64-10.8.msi".  
     
    i) Should the .msi file not be visible from the .zip package   
    ii) Right-click on SAC_10_8_R8_Windows.iso 
    iii) Click Mount 


                       Fig 1: Right-click the SAC .iso file and select Mount to access the installer files. 

 

 

  1. Open the MSI folder 
  1. Open either x32 or x64 
  1. Run the MSI installer. Double click on the file "SafeNetAuthenticationClient-x64-10.8.msi".  
     
  1. The SafeNet Authentication Client Installation Wizard window will be displayed on your windows computer, click Next 
     

Fig 2: Installation Wizard – Welcome Screen SafeNet Authentication Client Installation Wizard – Click Next to begin the installation. 

 
 
5. Select the appropriate language for SafeNet Authentication Client interface language, Click Next 
 

  Fig 3: Select Interface Language Choose your preferred interface language and click Next. 

 
 
6. Accept the license agreement radio button, click Next 
 
Fig 4: License Agreement: Accept the license agreement and click Next to proceed. 

 
 
7. Select Destination Folder, click Next 
 
Fig 5: Destination Folder Selection Confirm or change the installation directory, then click Next. 

 
 
8. Select the radio button for Typical Install, click Next 
 
Fig 6: Setup Type Selection Select Typical Install (recommended) and click Next. 

 
 
9. Click Install 
 
Fig 7: Ready to Install Review settings and click Install to start the installation process. 

 
 
 
Fig 8: Installation in Progress The SafeNet Authentication Client is being installed—please wait while setup completes. 

 
 
10. Click Finish  
 
Fig 9: 
Installation Complete Installation successful—click Finish to exit the setup wizard. 

 
 
11. Finally, you may need to restart your system for these changes to take effect. 
 
Fig 10: Restart Prompt Restart your system to apply configuration changes and complete the installation. 

 
 
12. The Token is now ready to use for code signing 
 

 

How to verify success 

Plug in your eToken and open the SafeNet Authentication Client tools from the Start menu (Windows) or Applications folder (macOS). The client should display your connected token and the Sectigo certificate stored on it. If the token and certificate appear, SAC is installed correctly and the token is ready for signing. 


Troubleshooting 

Issue: The .msi installer file is not visible inside the downloaded .zip package. 

Cause: Some SAC packages ship the installer inside a disc image (.iso) rather than as a loose .msi file. 

Solution: Right-click the SAC .iso disc image, select Mount, open the MSI folder, then open the x32 or x64 folder and run the SafeNetAuthenticationClient-x64 installer. 

Issue: Your computer does not detect the eToken after installation. 

Cause: The token was connected during installation, or the computer has not been restarted. 

Solution: Unplug the token, restart your computer, then reconnect the token and reopen the SafeNet Authentication Client. 


Similar questions 

How do I install the SafeNet Authentication Client on Windows for a Sectigo eToken? 

Which SafeNet Authentication Client version do I download for macOS or Linux? 

What do I do if the SafeNet .msi installer is missing from the .zip file? 

 

Need assistance?

Contact our team for help with your purchase or issuing your certificate.

Live chat

Call us today