Prerequisites

Before proceeding, ensure the following:

  1. Windows Environment

    • Operating System:

      • Windows 10 Version 1809 or later

      • Windows Server 2016 or later

    • Installed Software:

      • Windows SDK with SignTool.exe (version 10.0.22621.755 or later)

      • .NET 8 Runtime (required if using SDK-based tools)

    • (Optional) Installed: AWS CLI and AWS Tools for PowerShell

  2. AWS Environment

    • An AWS account with access to one of the following services:

      • AWS KMS (Key Management Service) with an RSA key pair

      • AWS CloudHSM (if using HSM-backed key material)

      • AWS Signer (for managed signing workflows)

    • IAM permissions to use the signing key or signing profile

    • (Optional) EC2 or CodeBuild agent configured with AWS credentials