Knowledge Base

Choose “Code Signing Certificate” as the “Certificate Type”: 
 

Choose a CA Backend that supports code signing with Key Attestation: 
 

Choose a Certificate Template having Key Attestation: 

Assign terms: 
 

Ensure the type is “Code Signing Certificate Enrollment Form”: 
 

Generate a URL extension: 
 

Save 

Select the Enrollment form and click the “Account” option: 
 
 

Click to add the new account: 
 
 
 

Configure the Organization Department Profile 
 
 

Access “Certificates” > “Code Signing Certificates” from SCM: 
 
 

Click “Invitations” from the top-right corner: 
 

Click the “+” Icon: 
 
 

Enter the following: 

Email (Email of the recipient who will provide the CSR & Attestation 

Enrollment Endpoint (The Enrollment form to be used) 

Account (This should populate based on the selected Enrollment endpoint, in case it does not, select the Account having the key attestation template) 

Click the “Send” control: 
 

The recipient needs to open the email they received from the enrollment form: 
 
 

The recipient will need to enter:  

The Certificate Term: 
 

The “Certificate Email” (San) 
 

First Name 
 

Last Name 
 
 
 

The recipient will need to upload the CSR 
 

The recipient will need to add the Key Attestation 

The value: 
 

The HSM Type: 
 

Any mandatory Custom fields will need to be entered. 
 

The user must accept the EULA 
 

Submit the enrollment