# How can we perform code signing using an HSM with module-signer?

**URL:** <https://forum.inductiveautomation.com/t/how-can-we-perform-code-signing-using-an-hsm-with-module-signer/85640>\
**Category:** Module Development\
**Created:** [February 13, 2024, 5:04pm UTC](https://forum.inductiveautomation.com/t/how-can-we-perform-code-signing-using-an-hsm-with-module-signer/85640 "2024-02-13T17:04:35Z")\
**Posts on this page:** 1\
**Showing post:** 21

<div class="post-metadata">

**Author:** ![Brian\_Ray](https://avatars.discourse-cdn.com/v4/letter/b/e0b2c6/32.png) [@Brian\_Ray](https://forum.inductiveautomation.com/u/Brian_Ray)\
**Post date:** [February 21, 2024, 12:04am UTC](https://forum.inductiveautomation.com/t/how-can-we-perform-code-signing-using-an-hsm-with-module-signer/85640/21 "2024-02-21T00:04:04Z")

</div>

UPDATE #2 2024-03-22

Hilarious, we still have some automation that successfully publishes to the Gradle Plugin Portal. It's [up there under Perrry's personal account](https://plugins.gradle.org/plugin/io.ia.sdk.modl).

So there is probably no custom configuration needed in `settings.gradle.kts` if you are already pulling from GPP.

* * *

UPDATE 2024-03-22

That PR has been merged and the Gradle plugin published to our `nexus.inductiveautomation.com` public repo. Make sure your Gradle project is using 7.6 or later for it to run reliably.

To use our Nexus repository for plugin resolution, add the following configuration to your `settings.gradle.kts` and `build.gradle.kts` (if using the Gradle Groovy DSL the syntax is similar):

```kotlin
// settings.gradle.kts

pluginManagement {
    repositories {
        maven {
            name = "publicNexusRelease"
            url = uri("https://nexus.inductiveautomation.com/repository/inductiveautomation-releases")
        }

        // if you want to use snapshot builds of the plugin
        // maven {
        // name = "publicNexusSnapshot"
        // url = uri("https://nexus.inductiveautomation.com/repository/inductiveautomation- // snapshots")
        // }

        gradlePluginPortal()

        // and any other plugin repos you may be using
    }
}

// build.gradle.kts

plugins {
    // any other plugins
    id("io.ia.sdk.modl") version "0.2.0"
}

```

For the time being we are not publishing to the [Gradle Plugin Portal](https://plugins.gradle.org/), even though an older version of this plugin is published there now. We're considering this down the road after ironing out some process issues.

* * *

Draft PR is up on GitHub.

[inductiveautomation/ignition-module-tools#43](https://github.com/inductiveautomation/ignition-module-tools/pull/43)

---

_[View the full topic](https://forum.inductiveautomation.com/t/how-can-we-perform-code-signing-using-an-hsm-with-module-signer/85640)._