Activating your DigiCert EV code signing token

Use these instructions to activate your secure token, enabling you to sign applications with a digital signature using your EV Code Signing Certificate.

Do you have a Retail/MPKI account? See the Activate Your EV Code Signing Hardware instructions.

Complete the following steps to start signing code with your EV code signing certificate:

    Step 1: Activate Your Device

    Wait until you receive your secure token from DigiCert before you start these instructions.

  1. On the computer from which you want to sign code (applications), log in to your CertCentral account.

  2. In your account, in the sidebar menu, click Certificates > Orders.

    Token Activation

  3. On the Orders page, use the drop-down lists, search box, advance search features (Show Advanced Search link), and column headers to filter the list of certificates.

    Token Activation

  4. In the Order # column of the EV Code Signing Certificate you need to activate, click the Quick View link.

  5. In the Order number details pane (on the right), click Initialize Token.

    Token Activation

  6. Have you received your token?

    • Yes – On the Order number page, check I have received the hardware token, click Submit, and continue to Step 2.

    • No – Do not proceed. Leave the page and wait for your token to arrive before continuing.

    Token Activation

Step 2: Obtain Your Preassigned Password

  1. On the EV Code Signing Hardware Token Order page, under Once you have installed the drive software, insert the token and change password, record your DigiCert provided password.

    Important: Your preassigned password will only be visible once. Make sure to take note of this password so you can access the certificate on your token.

    Token Activation

Step 3: Install the SafeNet Drivers and Client Software (Windows)

  1. On the EV Code Signing Hardware Token Order page, under Download the SafeNet driver for Windows, click the Click here to download the SafeNet drivers for Windows link to download SafeNetAuthenticationClient-64x.msi.

    The SafeNet drivers allow you to enable code signer authentication. Once enabled, SafeNet pops up before you sign code and requires you to enter your password to verify that you are the actual signer.

    Drivers Note: You will need to install the SafeNet drivers and client software on any computer from which you want to use your EV Code Signing Certificate token to sign code.

    Do you need driver software for another OS? Please email Support at support@digicert.com or call Support at 1-801-701-9600.

    Token Activation

  2. Run the SafeNet Authentication Client installer (double-click SafeNetAuthenticationClient-x64.msi).

  3. In the SafeNet Authentication Client Setup Wizard, complete the following steps to install the drivers:

    1. On the Welcome to the SafeNet Authentication Client Installation Wizard page, click Next to begin the software installation process.

      Welcome to Safenet Authentication Client

    2. On the Interface Language page, in the drop-down list, pick a language for the interface and then click Next.

      Safenet Authentication Client Interface Language

    3. On the License Agreement page, read through the license agreement, select I accept the license agreement and then click Next.

      Safenet Authentication Client License Agreement

    4. On the Destination Folder page, choose where you want to install the SafeNet Authentication Client and then click Next.

      Safenet Authentication Client Installation Folder

    5. On the Setup Type page, select Typical for the installation type and then click Next.

      Safenet client Standard or Custom installation screen.

    6. On The wizard is ready to begin installation page, click Install.

      Safenet client start installation screen.

    7. It may take a few minutes to install the software.

      Safenet client start installation in progress screen.

    8. On the SafeNet Authentication Client has been successfully installed page, click Finish to exit SafeNet Authentication Client Setup.

      Finish Safenet Installer.

    9. You have successfully installed the SafeNet Client Software.

Step 4: Change Your Token Password

    As a security precaution, we recommend changing the password for your SafeNet eToken after installing the drivers.

  1. To change the password, complete the following steps:

    It is important to complete this step to change your password.

    1. Plug in your DigiCert EV Code Signing Certificate token.

    2. Open SafeNet Authentication Client Tools.

    3. In the SafeNet Authentication Client Tools window, click Change Token Password.

      Token Activation

    4. On the Change Password Token page, in the Current Token Password box, enter the password that you retrieved from the EV Code Signing Hardware Token Order page (see Step 2).

      Token Activation

    5. In the New Token Password and Confirm Password boxes, create and confirm your new token password.

    6. Click OK.

  2. On the EV Code Signing Hardware Token Order page, click the Click here when you have changed the password on the hardware token link.

    Token Activation

  3. You're done! You can begin using your DigiCert EV Code Signing Certificate to sign code.

Step 5: Sign and Timestamp Code

  1. You are ready to begin signing your code with your DigiCert EV Code Signing Certificate.

  2. The process to sign and timestamp your code may vary slightly depending on the platform you're using.

    For specific instructions, choose your platform from the list below:

    For assistance with other platforms, see Code Signing Support & Tutorial or please contact our award-winning support team.