Secure Software Manager

Enabling autorenewal of existing codesigning certificates

Secure Software Manager has extended support for the auto-renewal of existing active codesigning certificates, both public and private which were issued from DigiCert. This feature can be enabled in the certificate profile and enforced for all certs which were previously issued from the profile or can be enabled per certificate if preferred. Autorenewel can also now be managed via the SSM CLI (SMCTL) for new and existing certs.

Introducing Teams for Secure Software Manager

Secure Software Manager has redesigned and enhancerd our access policies feature to now offer support for setting up of developer teams within the Secure Software Manager Account. Teams will allow admins to associate users, groups with keypairs, certificate profiles and keypair profiles to simplify the management of users and what cryptographic assets they can use, create and manage. Customers already using access policies will see continue to leverage that capability but can now opt to add keypairs to their teams going forward.

Enhancements to GPG Signing Workflows

This release sees some workflow enhancements to our GPG signing feature set. We have set all GPG subkeys to sign functionality as mandatory and retained sign functionality as optional on master GPG keys. We have also introduced a --force flag to the SSM CLI (SMCTL) to enable GPG Keypairs to be deleted as an automated flow without need for a human to confirm approval.