Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Making code signing token credentials persistent

I have a commercial code-signing certificate, which was delivered on a USB token. The vendor (GlobalSign) provides a download to a utility that needs to be installed to use the token, SafeNet.

This all works fine; however, I've previously had the ability for the password to persist for a period of time - meaning the first use of the day would require the password, but subsequent uses within the period (4 hours) wouldn't need me to reauthenticate.

This was the case until I had to rebuild the OS a few months ago, a completely fresh install of Windows 10. Since then, I've had to enter the password each and every time I sign something, regardless of whether that's via Visual Studio or signtool:

enter image description here

despite the settings in the SafeNet client being set to "Enable Single Login"

enter image description here

I'm fairly certain that my previous environment displayed a SafeNet-style authentication dialog rather than a Windows Security one. It's more of an inconvenience than anything, but is there something I can set/change/install to force SafeNet to do the authentication rather than Windows, which might restore the ability to remember the password for a period of time?

like image 981
KenD Avatar asked Aug 20 '19 10:08

KenD


People also ask

How to create token based authentication in web API using Visual Studio?

Step by step procedure to create token based authentication in Web API and C# Step 1: Open your Visual Studio and Create a new project, by selecting File-> New -> Project -> Select "Web" (Left panel) and Select "ASP.NET web-application" (Right-pane), name it and click "OK"

How do I revoke an access token created with temporary credentials?

If you created the access token using temporary security credentials, such as assumed roles or federated user access, you can revoke access by updating an IAM policy to deny access. For information, see Disabling Permissions for Temporary Security Credentials in the IAM User Guide.

How do I get an authorization token from codeartifact?

To fetch an authorization token from CodeArtifact, you must call the GetAuthorizationToken API. Using the AWS CLI, you can call GetAuthorizationToken with the login or get-authorization-token command. Root users cannot call GetAuthorizationToken.

How to enable credential persistence after installing SafeNet?

After installation, the Windows "Smart Card" authentication screen is replaced with the Safenet equivalent, and credential persistence is enforced as per the settings. One thing You can do is write an automation .Net exe which keeps running in background and whenever this screen prompts it will enter password automatically and clicks on OK.


1 Answers

I've finally been able to resolve this issue by updating the Safenet client to the current latest version, 10.7.167.0. After installation, the Windows "Smart Card" authentication screen is replaced with the Safenet equivalent, and credential persistence is enforced as per the settings.

like image 112
KenD Avatar answered Oct 22 '22 04:10

KenD