Hey everyone, I have tried to sign a zip file with module-signer code from GitHub - inductiveautomation/module-signer: A utility that signs modules for use in Ignition to create MODL file. We are using Sectigo USB eToken for signing. When we try to sign our ZIP File which contains more than one …

I’m not familiar with the Sectigo product, but I suspect you have the cert installed under the wrong slot ID. Standard slots 0x9a, 0x9c, 0x9d, and 0x9e have different expectations for PIN usage. This Yubikey document spells them out: https://developers.yubico.com/PIV/Introduction/Certificate_slots…

Possibly some actionable information here: Unable to sign using PKCS#11 token · Issue #42 · kaikramer/keystore-explorer · GitHub

I think I hit the same block on a YubiKey 5 NFC using the default signing slot 9c in enhancing ignition-module-tools' gradle-module-plugin to incorporate PKCS#11 signing support . Then it was possible to hack around that (for now) using Phil's slot 9a trick above. Longer term I think a password cal…

Draft PR. inductiveautomation/ignition-module-tools#43

[image] How can we perform code signing using an HSM with module-signer? Module Development UPDATE 2024-03-22 That PR has been merged and the Gradle plugin published to our nexus.inductiveautomation.com public repo. Make sure your Gradle project is using 7.6 or later for …

CKR_USER_NOT_LOGGED_IN Error when Signing ZIP file with Sectigo USB eToken

Module Development

Brian_Ray March 22, 2024, 9:41pm 6