Hi Rich,

SetupBuilder has to use Microsoft SignTool to code-sign files. I Googled and found this:

https://aws.amazon.com/blogs/securit...d-certificates

So in theory, it should be possible to implement something in SB to handle it. But we do not have a CloudHSM, so can't test it here. Do you have a HSM service? If you could provide us with the required command line for SignTool, then I would be more than happy to add this as an option to SetupBuilder 2023.

Friedrich