{"id":1755,"date":"2023-05-19T11:26:30","date_gmt":"2023-05-19T11:26:30","guid":{"rendered":"https:\/\/signmycode.com\/resources\/?p=1755"},"modified":"2024-09-17T06:16:10","modified_gmt":"2024-09-17T06:16:10","slug":"how-to-keep-your-digital-signature-credentials-safe-with-yubikey","status":"publish","type":"post","link":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey","title":{"rendered":"How to Keep Your Digital Signature Credentials Safe with YubiKey?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\">In our previous post, we explained\u00a0<a href=\"https:\/\/signmycode.com\/resources\/how-to-use-yubikey-for-code-signing-purpose\" target=\"_blank\" rel=\"noopener\">what YubiKey is.<\/a><\/span> How to use it for code signing?<br><br>Now let us discuss the importance of securely storing credentials and introduce the concept of using a dedicated removable device. We will specifically focus on the YubiKey from Yubico.<\/p>\n\n\n\n<div class=\"wp-block-columns has-green-background-color has-background is-layout-flex wp-container-core-columns-is-layout-2367b857 wp-block-columns-is-layout-flex\" style=\"padding-top:35px;padding-bottom:30px\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h3 class=\"wp-block-heading has-text-align-center\"><strong>Secure your Code Signing Certificate with YubiKey<\/strong><\/h3>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Code Signing Certificates ensure the software&#8217;s integrity and authenticity. Whereas YubiKey is a hardware-based authentication device for code signing certificate security.<\/p>\n\n\n\n<div class=\"wp-block-buttons alignwide is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button aligncenter\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/signmycode.com\/code-signing-certificates\">Get Token-Based Code Signing Certs<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here are a few key points:<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Point 1:<\/mark> <\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Storing credentials on disk, even on a removable USB flash drive that is only plugged in when signing binaries (executables), is considered a bad idea. This approach is vulnerable to security risks, as the credentials can be accessed or compromised if the device or disk is lost, stolen, or compromised.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Point 2:<\/mark><\/strong> <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Storing credentials in the Windows certificate store as an alternative is also not considered a robust security solution. The text implies that more than relying solely on the built-in security measures provided by Windows is required. Using a metaphor suggests it&#8217;s as effective as throwing a chair with Steve Ballmer (former CEO of Microsoft) sitting on it. In other words, it could be more secure.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Point 3:<\/mark> <\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Instead, the text suggests using a dedicated removable device explicitly designed to protect sensitive credentials. It introduces the concept of FIPS 201 Personal Identity Verification (PIV) devices, which comply with a U.S. government standard for secure credentials.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Point 4:<\/mark> <\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The YubiKey from Yubico is highlighted as an example of a convenient and relatively affordable PIV device. The author mentions that they will focus on explaining the usage of YubiKeys specifically, although the general process may also apply to other FIPS 201 PIV devices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now we know the importance of securely storing credentials and using dedicated PIV devices like the YubiKey as a secure solution for protecting sensitive information. It discourages relying solely on disk storage or the Windows certificate store for storing such credentials.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Storing your Code Signing Credential into a YubiKey<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This section provides instructions on how to store your code signing credential into a YubiKey, a hardware security device. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s a breakdown of the steps:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark><\/strong> Open <strong>PIV Manager<\/strong> (pivman.exe) is the software used to manage <strong>YubiKey&#8217;s Personal Identity Verification<\/strong> (PIV) functionality.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"199\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-insert-yubikey.png\" alt=\"YubiKey PIV Manager Insert your YubiKey\" class=\"wp-image-1757\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-insert-yubikey.png 500w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-insert-yubikey-300x119.png 300w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 2: <\/mark><\/strong>Plug in your <strong>YubiKey<\/strong>. If it&#8217;s your first time using it, you&#8217;ll be asked to <strong>set a PIN (Personal Identification Number)<\/strong> for the device.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"401\" height=\"340\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-set-pin.png\" alt=\"YubiKey PIN Generation\" class=\"wp-image-1758\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-set-pin.png 401w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-set-pin-300x254.png 300w\" sizes=\"auto, (max-width: 401px) 100vw, 401px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 3:<\/mark> <\/strong>On the PIN setup screen, keep the &#8220;<strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Use PIN as key<\/mark><\/strong>&#8221; option checked under &#8220;<strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Management Key<\/mark><\/strong>&#8220;. This option relates to how the PIN is used to authenticate and unlock the YubiKey.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 4:<\/mark><\/strong> For code signing on Windows, you can overlook the recommendation for cross-platform compatibility regarding the PIN. Windows doesn&#8217;t have issues using a PIN that includes extended alphanumeric characters. The PIN is already short enough at eight characters.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Note: <\/strong>It&#8217;s important to note that the YubiKey, like a credit card, allows only three attempts to enter the correct PIN before locking itself\u2014such a security measure to protect the data stored on the device. If the YubiKey gets locked, it can be reset, but the credentials stored on it will be lost.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 5: <\/mark><\/strong>After setting the PIN, you should see a screen where you have to click the &#8220;<strong>Certificates<\/strong>&#8221; tab in the PIV Manager.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"200\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-certificate-loaded.png\" alt=\"YubiKey PIV Manager Certificates Tab\" class=\"wp-image-1760\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-certificate-loaded.png 500w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-manager-certificate-loaded-300x120.png 300w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 6:<\/mark><\/strong> Select the &#8220;<strong>Digital Signature<\/strong>&#8221; section in the <strong>Certificates<\/strong> screen. This is the type of certificate you&#8217;ll require for code signing.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"564\" height=\"214\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-authentication-digital-signature.png\" alt=\"Digital Signature YubiKey PIV Certificate\" class=\"wp-image-1761\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-authentication-digital-signature.png 564w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-piv-authentication-digital-signature-300x114.png 300w\" sizes=\"auto, (max-width: 564px) 100vw, 564px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 7:<\/mark> <\/strong>Click &#8220;<strong>Import from file<\/strong>&#8221; and <strong>select your .p12 code <\/strong>to sign the credential file. You will be prompted to enter a password for the private key within the .p12 file, not the PIN you set for the YubiKey.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 8:<\/strong> <\/mark>If the <strong>import process is successful<\/strong>, you will see a notice indicating so. At this point, you can unplug your YubiKey.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"504\" height=\"301\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-certificate-installed.png\" alt=\"Certificate Installed\" class=\"wp-image-1762\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-certificate-installed.png 504w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-certificate-installed-300x179.png 300w\" sizes=\"auto, (max-width: 504px) 100vw, 504px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 9:<\/mark> <\/strong>Plug the YubiKey back in, and return to the &#8220;<strong>Digital Signature<\/strong>&#8221; certificate in the <strong>PIV Manage<\/strong>r. You should now see details about the installed credential, indicating that it is ready to be used for code signing.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"946\" height=\"360\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-digital-signature.png\" alt=\"Digital Signature YubiKey\" class=\"wp-image-1763\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-digital-signature.png 946w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-digital-signature-300x114.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/yubikey-digital-signature-768x292.png 768w\" sizes=\"auto, (max-width: 946px) 100vw, 946px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Following these steps should allow you to store your code signing credential on the YubiKey and use it for digital signing.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In our previous post, we explained\u00a0what YubiKey is. How to use it for code signing? Now let us discuss the importance of securely storing credentials and introduce the concept of using a dedicated removable device. We will specifically focus on the YubiKey from Yubico. Secure your Code Signing Certificate with YubiKey Code Signing Certificates ensure&hellip; <a class=\"more-link\" href=\"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\">Read More <span class=\"screen-reader-text\">How to Keep Your Digital Signature Credentials Safe with YubiKey?<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1776,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[270,298,301],"class_list":["post-1755","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-signing-tutorials","tag-pin-and-management-key","tag-store-code-signing-credential-into-yubikey","tag-yubikey-piv-certificate-management","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Keep Your Code Signing Credentials Safe with YubiKey?<\/title>\n<meta name=\"description\" content=\"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Keep Your Code Signing Credentials Safe with YubiKey?\" \/>\n<meta property=\"og:description\" content=\"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\" \/>\n<meta property=\"og:site_name\" content=\"SignMyCode - Resources\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-19T11:26:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-17T06:16:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"912\" \/>\n\t<meta property=\"og:image:height\" content=\"453\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@Sign_My_Code\" \/>\n<meta name=\"twitter:site\" content=\"@Sign_My_Code\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Janki Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\"},\"author\":{\"name\":\"Janki Mehta\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/person\\\/2e80276fd34fd5439c04cd3cb96a389f\"},\"headline\":\"How to Keep Your Digital Signature Credentials Safe with YubiKey?\",\"datePublished\":\"2023-05-19T11:26:30+00:00\",\"dateModified\":\"2024-09-17T06:16:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\"},\"wordCount\":705,\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\",\"keywords\":[\"PIN and Management Key\",\"store code signing credential into YubiKey\",\"YubiKey PIV Certificate Management\"],\"articleSection\":[\"Code Signing Tutorials\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\",\"name\":\"How to Keep Your Code Signing Credentials Safe with YubiKey?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\",\"datePublished\":\"2023-05-19T11:26:30+00:00\",\"dateModified\":\"2024-09-17T06:16:10+00:00\",\"description\":\"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp\",\"width\":912,\"height\":453,\"caption\":\"Code Signing Credential with YubiKey\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Keep Your Digital Signature Credentials Safe with YubiKey?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#website\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\",\"name\":\"SignMyCode - Resources\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\",\"name\":\"SignMyCode\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo1.png\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo1.png\",\"width\":135,\"height\":86,\"caption\":\"SignMyCode\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Sign_My_Code\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/person\\\/2e80276fd34fd5439c04cd3cb96a389f\",\"name\":\"Janki Mehta\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"caption\":\"Janki Mehta\"},\"description\":\"Janki Mehta is a Cyber-Security Enthusiast who constantly updates herself with new advancements in the Web\\\/Cyber Security niche. Along with theoretical knowledge, she also implements her practical expertise in day-to-day tasks and helps others to protect themselves from threats.\",\"sameAs\":[\"http:\\\/\\\/smcresources.ssltoolsonline.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Keep Your Code Signing Credentials Safe with YubiKey?","description":"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey","og_locale":"en_US","og_type":"article","og_title":"How to Keep Your Code Signing Credentials Safe with YubiKey?","og_description":"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.","og_url":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey","og_site_name":"SignMyCode - Resources","article_published_time":"2023-05-19T11:26:30+00:00","article_modified_time":"2024-09-17T06:16:10+00:00","og_image":[{"width":912,"height":453,"url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_image":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","twitter_creator":"@Sign_My_Code","twitter_site":"@Sign_My_Code","twitter_misc":{"Written by":"Janki Mehta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#article","isPartOf":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey"},"author":{"name":"Janki Mehta","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/person\/2e80276fd34fd5439c04cd3cb96a389f"},"headline":"How to Keep Your Digital Signature Credentials Safe with YubiKey?","datePublished":"2023-05-19T11:26:30+00:00","dateModified":"2024-09-17T06:16:10+00:00","mainEntityOfPage":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey"},"wordCount":705,"publisher":{"@id":"https:\/\/signmycode.com\/resources\/#organization"},"image":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","keywords":["PIN and Management Key","store code signing credential into YubiKey","YubiKey PIV Certificate Management"],"articleSection":["Code Signing Tutorials"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey","url":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey","name":"How to Keep Your Code Signing Credentials Safe with YubiKey?","isPartOf":{"@id":"https:\/\/signmycode.com\/resources\/#website"},"primaryImageOfPage":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage"},"image":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","datePublished":"2023-05-19T11:26:30+00:00","dateModified":"2024-09-17T06:16:10+00:00","description":"Learn how to use YubiKey PIV Manager to store code signing certificate and secure code signing credentials.","breadcrumb":{"@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#primaryimage","url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","contentUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/05\/how-to-keep-your-code-signing-credentials-safe-with-yubikey-jpg.webp","width":912,"height":453,"caption":"Code Signing Credential with YubiKey"},{"@type":"BreadcrumbList","@id":"https:\/\/signmycode.com\/resources\/how-to-keep-your-digital-signature-credentials-safe-with-yubikey#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/signmycode.com\/resources\/"},{"@type":"ListItem","position":2,"name":"How to Keep Your Digital Signature Credentials Safe with YubiKey?"}]},{"@type":"WebSite","@id":"https:\/\/signmycode.com\/resources\/#website","url":"https:\/\/signmycode.com\/resources\/","name":"SignMyCode - Resources","description":"","publisher":{"@id":"https:\/\/signmycode.com\/resources\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/signmycode.com\/resources\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/signmycode.com\/resources\/#organization","name":"SignMyCode","url":"https:\/\/signmycode.com\/resources\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/logo\/image\/","url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2021\/11\/logo1.png","contentUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2021\/11\/logo1.png","width":135,"height":86,"caption":"SignMyCode"},"image":{"@id":"https:\/\/signmycode.com\/resources\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Sign_My_Code"]},{"@type":"Person","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/person\/2e80276fd34fd5439c04cd3cb96a389f","name":"Janki Mehta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","caption":"Janki Mehta"},"description":"Janki Mehta is a Cyber-Security Enthusiast who constantly updates herself with new advancements in the Web\/Cyber Security niche. Along with theoretical knowledge, she also implements her practical expertise in day-to-day tasks and helps others to protect themselves from threats.","sameAs":["http:\/\/smcresources.ssltoolsonline.com"]}]}},"_links":{"self":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/1755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/comments?post=1755"}],"version-history":[{"count":8,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/1755\/revisions"}],"predecessor-version":[{"id":4033,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/1755\/revisions\/4033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/media\/1776"}],"wp:attachment":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/media?parent=1755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/categories?post=1755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/tags?post=1755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}