Common use of EV Code Signing Clause in Contracts

EV Code Signing. Subscriber must use one of the following methods to generate, store and use EV Code Signing Certificate Private Keys in a crypto module that meets or exceeds the requirements of FIPS 140-2 level 2. • A hardware security module (HSM) certified as conforming to FIPS 140-2 Level 2 or higher. • A hardware storage token with a unit design form factor of USB token FIPS 140-2 Level 2 or higher. At any time during the application and life cycle of the Certificate, Subscriber must be able to, on request of GlobalSign, present proof that the Key Pair associated with the Certificate (request) is stored on a cryptographic device that meets the requirements of FIPS 140-2 Level 2 (or equivalent). Failure to provide such evidence might result in revocation of the Certificate.

EV Code Signing. Subscriber must use one of the following methods to generate, store and use EV Code Signing Certificate Private Keys in a crypto module that meets or exceeds the requirements of FIPS 140-2 level 2. • A hardware security module (HSM) certified as conforming to FIPS 140-2 Level 2 or higher. • A hardware storage token with a unit design form factor of USB token FIPS 140-2 Level 2 or higher. At any time during the application and life cycle of the Certificate, Subscriber must be able to, on request of GlobalSignIdently, present proof that the Key Pair associated with the Certificate (request) is stored on a cryptographic device that meets the requirements of FIPS 140-2 Level 2 (or equivalent). Failure to provide such evidence might result in revocation of the Certificate.