Skip to main content
This document shows you how to use the Futurex CNG library to configure the KMES Series 3 to use Microsoft Signtool. For other questions about the KMES Series 3 device, see the relevant administrator guide. Microsoft SignTool uses a code signing certificate to digitally sign files, verify signatures in files, and timestamp files. By integrating with the KMES Series 3, every time you run a SignTool command, the system retrieves from the KMES the private key of the code signing certificate stored on the KMES.

​
Integration overview

This guide covers the following tasks:
  1. Install Futurex CNG (FXCNG).
  2. Configure KMES Series 3.
  3. Edit the Futurex CNG (FXCNG) configuration file.
  4. Import certificates into the Windows certificate store.
  5. Associate a private key with a certificate.
  6. Test Microsoft SignTool commands.
The following sections show you how to perform these tasks.