Knowledge Base
How to Enroll a Code Signing Certificate in SCM?
Overview
Code Signing Certificates are used to digitally sign software, ensuring authenticity and integrity. In SCM, enrollment involves creating a certificate profile, setting up an enrollment form, and submitting a Certificate Signing Request (CSR).
Prerequisites
-
Access to Sectigo Certificate Manager (SCM) with administrator privileges.
-
A configured Code Signing Certificate Profile.
-
CSR generated in PEM format.
-
If required, Key Attestation enabled by Sectigo Support.
Step 1: Create a Certificate Profile
-
Log in to SCM as an administrator (MRAO role).
-
Navigate to Enrollment > Certificate Profiles.
-
Click Add to create a new profile.
-
Complete the fields: Name, CA Backend, Certificate Type (Code Signing Certificate), Template (OV or EV), Terms (validity period).
-
Click Save.
Step 2: Delegate Profile to Organization
-
Navigate to Organization > Certificate Settings.
-
Enable Code Signing Certificates.
-
Assign the newly created profile to your organization.
Step 3: Create an Enrollment Form
-
Navigate to Enrollment > Enrollment Forms.
-
Click Add (+) to create a new form.
-
Configure: Type (Code Signing Certificate Enrollment Form), Generate URL Extension, Authentication (Email Confirmation or Secret ID).
-
Click Save.
-
Add the form to an account: Select the form → Accounts → Add (+), provide account details, assign certificate profiles.
Step 4: Send Enrollment Invitation
-
Navigate to Certificates > Code Signing Certificates.
-
Click Invitations → Add (+).
-
Enter: Email of the recipient, Enrollment Endpoint (the form created earlier), Account associated with the endpoint.
-
Click Send.
Step 5: Complete Enrollment
-
The recipient opens the email and clicks the enrollment link.
-
Fill in: Certificate Email (SAN), First Name / Last Name, Certificate Term.
-
Upload: CSR in PEM format, Key Attestation file (if required).
-
Submit the form.
Best Practices
-
Ensure CSR matches the certificate profile requirements.
-
Use strong authentication for enrollment forms.
-
For EV Code Signing, verify organization details before submission.
References
-
Understanding Enrollment Forms: https://docs.sectigo.com/scm/scm-administrator/understanding-enrollment-forms
-
Understanding Certificate Profiles: https://docs.sectigo.com/scm/scm-administrator/understanding-certificate-profiles
-
Understanding Code Signing Certificates: https://docs.sectigo.com/scm/scm-administrator/understanding-code-signing-certificates
-
Managing Code Signing Certificates: https://docs.sectigo.com/scm/scm-administrator/managing-code-signing-certificates
Related Articles:
Tags:
Need assistance?
Contact our team for help with your purchase or issuing your certificate.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
