I just got one and it requires Safenet Auth to access drive.
You cannot copy it and it is not a pfx file.

I have a microsoft signtool command I can run to sign but wondering if I can
get SB to use this so I don't have to manually do it on every build.

I did search the forums and did not find anything other than your announcement
about getting EV certs through you at a discount.