Code (powershell) signing with HCV?

Vault
1

Moin, the policy for PowerShell scripts is “AllSigned”. Can I have the scripts signed using the HCV API (i.e. upload the unsigned script and get the signed script back), or does it really have to run on a Windows server? I would use GitLab Runner somehow if there is no other solution.
Thanks for any hint.

2

Hi Michael,

Have you seen/tried following this:

I haven’t tried this myself, so I would love to hear if it helps you out.

3

Moin,
thank you, I think that helps. Now the demand for time stamping came up. We have to evaluate it again. But it looks so good that I’m sure that we can sign the script with a key from HCV, but generate/check the timestamps with a public service.
Micha

1 Like