Code Signing Integration with AppViewX CSP/PKCS#11

Using Signtool with AppViewX CSP

Execute the AppViewX SIGN+ Installer to set up the necessary prerequisites for utilizing the AppViewX CSP/PKCS11 Providers.
Copy the signtool command from the README file and incorporate it into the Azure Pipeline Configuration File by updating the relevant stage and script.
```
- script: signtool.exe sign /f <path to certificate>  /fd <digest algorithm>  /csp <csp_name> /k <key_alias_name> /tr <timestamp_url> /td <timestamp digest algorithm>  <input_file_path>
displayName: Signtool Signing
```
- /f <path to certificate>: Path to your code-signing certificate.
- /fd <digest algorithm>: Specifies the hashing algorithm.
- /csp <csp_name>: Name of Cryptographic Service Provider (CSP).
- /k <key_alias_name>: Key Container Name.
- /tr <timestamp_url>: Provides a timestamp from a trusted timestamping authority.
- /tr <timestamp_digest>: Specifies the timestamping Digest algorithm.
- <input_file_path>: Path to the file to be signed.
The parameters <path to certificate>, <digest algorithm>, <csp_name>, <key_alias_name>, <timestamp_url>, and <timestamp_digest> are automatically generated according to the signing policy configurations outlined in the README file after executing the SIGN+ Installer.

Execute the AppViewX SIGN+ Installer to install the prerequisites for using the AppViewX CSP/PKCS11 Providers.
Copy the jarsigner command from the README file and update the Azure Pipeline Configuration File with the correct stage and script.
```
- script: jarsigner.exe -verbose -storetype "Windows-My" -keyStore NONE -tsa <time_stamp_url> <input_file_path> -signedjar <output_file_path> -sigalg <signature algorithm> <keypair alias>
  displayName: Jarsigner Signing
```
The parameters <time_stamp_url>, <signature algorithm> and <keypair alias> are automatically generated in the README file after executing the SIGN+ Installer.

Execute the AppViewX SIGN+ Installer to set up the prerequisites for using the AppViewX CSP/PKCS11 Providers.
Copy the nuget command from the README file and update the Azure Pipeline Configuration File with the relevant stage and script.
```
- script: nuget.exe sign <input_file_path> -Timestamper <timestamp_url> -CertificateFingerprint <certificate_fingerprint> -HashAlgorithm <hashing_algorithm> -Verbosity detailed -Overwrite
  displayName: Nuget Signing
```
The parameters <time_stamp_url>, <certificate_fingerprint> and <hashing_algorithm> are automatically generated in the README file after executing the SIGN+ Installer.

Execute the AppViewX SIGN+ Installer to install the prerequisites needed for the AppViewX CSP/PKCS11 Providers.
Copy the jarsigner command from the README file and update the Azure Pipeline Configuration File with the corresponding stage and script.
```
- script: jarsigner.exe -verbose -keystore NONE -storetype PKCS11 -certs -providerclass sun.security.pkcs11.SunPKCS11 -providerArg <path to AVXPKCS11V1.cfg> <input_file_path> -signedjar <output_file_path> -tsa <time_stamp_url> -sigalg <signature algorithm> <keypairalias>
  displayName: Jarsigner Signing
```
The parameters <path to AVXPKCS11V1.cfg>, <time_stamp_url>, <signature algorithm> and <keypair alias> are automatically generated in the README file after executing the SIGN+ Installer.

Execute the AppViewX SIGN+ Installer to install the prerequisites necessary for using the AppViewX CSP/PKCS11 Providers.
Copy the JSign command from the README file and update the Azure Pipeline Configuration File with the appropriate stage and script.
```
- script: java -jar <path_to_jsign_jar> --keystore <path to AVXPKCS11V1.cfg> --storetype PKCS11 --storepass 12345678 --alias <keypair alias>  --alg <digest algorithm> --tsaurl <timestamp url> <input_file_path>
  displayName: JSign Signing
```
The parameters <path to AVXPKCS11V1.cfg>, <keypair alias>, <digest algorithm> and <timestamp url> are automatically generated according to the signing policy configurations outlined in the README file after executing the SIGN+ Installer.

Run the AppViewX SIGN+ Installer to install the prerequisites for using the AppViewX CSP/PKCS11 Providers.
Copy the APKSigner command from the README file and update the Azure Pipeline Configuration File with the corresponding stage and script.
```
- script: java -jar <path_to_apk_signer_jar> sign --provider-class sun.security.pkcs11.SunPKCS11 --provider-arg <path to AVXPKCS11V1.cfg> --ks NONE --ks-type PKCS11 --ks-pass pass:12345678 --ks-key-alias <keypair alias> --in "<input_file_path>" --out "<output_file_path>" --v1-signing-enabled false --v2-signing-enabled false --v3-signing-enabled true --v4-signing-enabled false
  displayName: APKSigner Signing
```
The parameters <path to AVXPKCS11V1.cfg>, <keypair alias> are automatically generated according to the signing policy configurations outlined in the README file after executing the SIGN+ Installer.