Code Signing Certificate (CSC)

Since June 2023, due to higher security requirements, private keys for standard code signing certificates must be stored on hardware that is at least
  • FIPS
  • Common Criteria EAL4
  • or an equivalent standard.
This also applies to the use of HSMs or special USB tokens.

For example, buy a Yubico YubiKey 5C NFC FIPS (~ 100 €) and request a CSC from TCS administrators.

Our previous certificate provider Sectigo terminated the contract with GÉANT prematurely on January 10, 2025. The ordering processes are currently being defined with the new provider HARICA, which will take a few more days.

There is a how-to for generating a CSR and installing the CSC on the SSL Dragon website:
As all our certificates are only OV and not EV certificates, RSA2048 should also be possible.