One more consideration: You can't use an EV to sign something within a
virtual machine. Safenet sees the token on the host, but nothing in
the VM.

From Sectigo tech support:

"It is mandatory to plugin the device on every device you want to sign
the files . Unfortunately it can not be used on virtual machine."

Regarding the Safenet (below) you can download from sectigo, it's an
un-registered version. I don't know yet if it expires or how much it
costs if it does. I was able to use it to change the EV password. You
can also change the label.

It shows the maximum password re-tries as 15. And it shows how many
attempts have been made. So don't mess up<g>.

Jeff Slarve

Ones and Zeros are my Heroes