Cryptographic libraries and frameworks

When your private key is stored in DigiCert​​®​​ Software Trust Manager, and you want to sign your software, a cryptographic library or framework is used to generate a hash of the file you want to sign, then provides the hash to Software Trust Manager where your private key is used to sign the hash, and finally sends the signed hash back to your signing tool to complete the signing process. This ensures that your private key remains protected while allowing you to create digital signatures for files using the cryptographic library or framework.