AWS Security Blog

Karim Hamdy Abdelmonsif Ibrahim

Author: Karim Hamdy Abdelmonsif Ibrahim

Figure 1: Architectural overview

Signing executables with HSM-backed certificates using multiple Windows instances

December 22, 2025: CloudHSM SDK3 is no longer supported. AWS recommends that you use the latest version, AWS CloudHSM KSP SDK5. We updated this post with SDK5 functionality and features. Customers use code signing certificates to digitally sign software, documents, and other certificates. Signing is a cryptographic tool that lets users verify that the code […]