Cryptographic libraries and frameworks
When your private key is securely stored in DigiCert® Software Trust Manager, the cryptographic library or framework generates a hash of the file you want to sign, then provides the hash to Software Trust Manager where your private key is used to sign the hash, and finally sends the signed hash back to your signing tool to complete the signing process. This ensures that your private key remains protected while allowing you to create digital signatures for files using the cryptographic library or framework.