You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ms.custom: template-how-to-pattern #Required; leave this attribute/value as-is.
10
10
---
11
11
12
+
# Implement Signing Integrations with Trusted Signing
13
+
12
14
Trusted Signing currently supports the following signing integrations:
13
15
• SignTool
14
16
• GitHub Action
@@ -21,21 +23,21 @@ This article explains how to set up each of the above Trusted Signing signing in
21
23
22
24
23
25
## Set up SignTool with Trusted Signing
24
-
This section explains how to set up SignTool to use with Trusted Signing. For more detailed signing with SignTool, check out [Tutorial Public Trust](tutorial.md).
26
+
This section explains how to set up SignTool to use with Trusted Signing.
25
27
26
28
Prerequisites:
27
-
• A Trusted Signing account, Identity Validation, and Certificate Profile.
28
-
• Ensure there are proper individual or group role assignments for signing (“Trusted Signing Certificate Profile Signer” role).
29
+
*A Trusted Signing account, Identity Validation, and Certificate Profile.
30
+
*Ensure there are proper individual or group role assignments for signing (“Trusted Signing Certificate Profile Signer” role).
29
31
30
32
Overview of steps:
31
33
1. [Download and install SignTool.](#download-and-install-signtool)
32
-
2. [Download and install the .NET 6 Runtime.](#download-and-install-.net-6.0-runtime)
33
-
3. [Download and install the Trusted Signing Dlib Package.](download-and-install-trusted-signing-dlib-package)
34
+
2. [Download and install the .NET 6 Runtime.](#download-and-install-net-60-runtime)
35
+
3. [Download and install the Trusted Signing Dlib Package.](#download-and-install-trusted-signing-dlib-package)
34
36
4. [Create JSON file to provide your Trusted Signing account and Certificate Profile.](#create-json-file)
35
-
5. [Invoke SignTool.exe to sign a file.](invoke-signtool-to-sign-a-file)
37
+
5. [Invoke SignTool.exe to sign a file.](#invoke-signtool-to-sign-a-file)
36
38
37
39
### Download and install SignTool
38
-
Trusted Signing requires the use of SignTool.exe to sign files on Windows, specifically the version of SignTool.exe from the Windows 10 SDK 10.0.19041 or higher. You can install the full Windows 10 SDK via the Visual Studio Installer or [download and install it separately](https://developer.microsoft.com/en-US/windows/downloads/windows-10-sdk/).
40
+
Trusted Signing requires the use of SignTool.exe to sign files on Windows, specifically the version of SignTool.exe from the Windows 10 SDK 10.0.19041 or higher. You can install the full Windows 10 SDK via the Visual Studio Installer or [download and install it separately](https://developer.microsoft.com/en-us/windows/downloads/windows-sdk/).
39
41
40
42
41
43
To download and install SignTool:
@@ -85,12 +87,12 @@ To sign using Trusted Signing, you need to provide the details of your Trusted S
85
87
86
88
| Region | Region Class Fields | Endpoint URI value |
87
89
|--------------|-----------|------------|
88
-
| East US | EastUS |https://eus.codesigning.azure.net|
89
-
| West US | WestUS |https://wus.codesigning.azure.net|
90
-
| West Central US | WestCentralUS |https://wcus.codesigning.azure.net/|
91
-
| West US 2 | WestUS2 |https://wus2.codesigning.azure.net/|
92
-
| North Europe | NorthEurope |https://neu.codesigning.azure.net|
93
-
| West Europe | WestEurope |https://weu.codesigning.azure.net|
90
+
| East US | EastUS |`https://eus.codesigning.azure.net`|
91
+
| West US | WestUS |`https://wus.codesigning.azure.net`|
92
+
| West Central US | WestCentralUS |`https://wcus.codesigning.azure.net/`|
93
+
| West US 2 | WestUS2 |`https://wus2.codesigning.azure.net/`|
94
+
| North Europe | NorthEurope |`https://neu.codesigning.azure.net`|
95
+
| West Europe | WestEurope |`https://weu.codesigning.azure.net`|
94
96
95
97
* The optional `"CorrelationId"` field is an opaque string value that you can provide to correlate sign requests with your own workflows such as build identifiers or machine names.
96
98
@@ -106,10 +108,10 @@ Complete the following steps to invoke SignTool to sign a file for you:
106
108
* Both x86 and x64 versions of SignTool.exe are provided as part of the Windows SDK - ensure you reference the corresponding version of Azure.CodeSigning.Dlib.dll. The above example is for the x64 version of SignTool.exe.
107
109
* You must make sure you use the recommended Windows SDK version in the dependencies listed at the beginning of this article. Otherwise our dlib won’t work.
108
110
109
-
Trusted Signing certificates have a 3-day validity, so timestamping is critical for continued successful validation of a signature beyond that 3-day validity period. Trusted Signing recommends the use of Trusted Signing’s Microsoft Public RSA Time Stamping Authority: http://timestamp.acs.microsoft.com/.
111
+
Trusted Signing certificates have a 3-day validity, so timestamping is critical for continued successful validation of a signature beyond that 3-day validity period. Trusted Signing recommends the use of Trusted Signing’s Microsoft Public RSA Time Stamping Authority: `http://timestamp.acs.microsoft.com/`.
110
112
111
113
## Use other signing integrations with Trusted Signing
112
-
This section explains how to set up other not [SignTool](#setup-signtool-with-trusted-signing) signing integrations with Trusting Signing.
114
+
This section explains how to set up other not [SignTool](#set-up-signtool-with-trusted-signing) signing integrations with Trusting Signing.
113
115
114
116
* GitHub Action – To use the GitHub action for Trusted Signing, visit [Azure Code Signing · Actions · GitHub Marketplace](https://github.com/marketplace/actions/azure-code-signing) and follow the instructions to set up and use GitHub action.
Copy file name to clipboardExpand all lines: articles/trusted-signing/tutorial-assign-roles.md
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,8 +7,9 @@ ms.service: azure-code-signing #Required; service per approved list. slug assign
7
7
ms.topic: tutorial #Required; leave this attribute/value as-is.
8
8
ms.date: 03/21/2023 #Required; mm/dd/yyyy format.
9
9
---
10
+
# Assigning roles in Trusted Signing
10
11
11
-
The Trusting Signing service has a few Trusted Signing specific roles (in addition to the standard Azure roles). Use [Azure role-based access control (RBAC)](https://docs.microsoft.com/en-us/azure/role-based-access-control/overview) to assign user and group roles for the Trusted Signing specific roles. In this tutorial, you review the different Trusted Signing supported roles and assign roles to your Trusted Signing account on the Azure portal.
12
+
The Trusting Signing service has a few Trusted Signing specific roles (in addition to the standard Azure roles). Use [Azure role-based access control (RBAC)](https://docs.microsoft.com/azure/role-based-access-control/overview) to assign user and group roles for the Trusted Signing specific roles. In this tutorial, you review the different Trusted Signing supported roles and assign roles to your Trusted Signing account on the Azure portal.
12
13
13
14
## Supported roles with Trusting Signing
14
15
The following table lists the roles that Trusted Signing supports, including what each role can access within the service’s resources.
@@ -30,8 +31,8 @@ Complete the following steps to assign roles in Trusted Signing.
30
31
2. Select on the **Roles** tab and search "Trusted Signing". You can see in the screenshot below the two custom roles.
31
32

32
33
33
-
3. To assign these roles, select on the **Add** drop down and select **Add role assignment**. Follow the [Assign roles in Azure](https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current) guide to assign the relevant roles to your identities.
34
+
3. To assign these roles, select on the **Add** drop down and select **Add role assignment**. Follow the [Assign roles in Azure](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal?tabs=current) guide to assign the relevant roles to your identities.
34
35
35
36
## Related content
36
-
*[What is Azure role-based access control (RBAC)?](https://docs.microsoft.com/en-us/azure/role-based-access-control/overview)
37
+
*[What is Azure role-based access control (RBAC)?](https://docs.microsoft.com/azure/role-based-access-control/overview)
0 commit comments