Skip to main content
Participant
Jul 16, 2024 3:46 PM UTC
Question

ZXPSignCmd Hsm Support

We're using ZXPSignCMD tool for signing an Adobe InDesign CEP extension. We have a mandate to update all the company’s signings to D-KMS (Key Management System), a HSM (Hardware Security Module) backed service (see New private key storage requirement for Code Signing certificates 1).
In the documentation of the tool CEP-Resources/ZXPSignCMD/SigningTechNote_CC.pdf at master · Adobe-CEP/CEP-Resources · GitHub we don’t see any reference on HSM support.
Are any plans on updating the tool to support this?

10 replies

Adobe Employee
Feb 17, 2026 11:07 AM UTC

Hi ​@mgnitura ,

Thank you for reporting this issue.
At present, we only support the ZXPSignCMD tool for signing an Adobe CEP plugin.
Support for HSM is in our roadmap, and we will keep you updated once it is implemented.


Regards,
Naina
(Adobe Team) 

Translate
Participating Frequently
Aug 31, 2025 7:26 AM UTC

There's a Github ticket for this now:
https://github.com/Adobe-CEP/CEP-Resources/issues/550
Please follow if this is still relevant for you.

Translate
Participant
May 16, 2025 2:27 PM UTC

Hi @ErinF 

Is there a plan for ZXPSignCmd to support Azure HSM? 

Thanks!

Translate
Abhishek Rao
Community Manager
Community Manager
May 16, 2025 3:24 PM UTC

Hi @CHL1, 

 

Thanks for reaching out. I am currently checking this question with the product team and will provide you with an update soon.

 

Best regards,
Abhishek 

Translate
leo.r
Community Expert
Community Expert
Jul 16, 2024 4:58 PM UTC

You'll probably have better luck on this forum:

https://forums.creativeclouddeveloper.com/

Translate
leo.r
Community Expert
Community Expert
Jul 16, 2024 5:02 PM UTC
mgnituraAuthor
Participant
Jul 17, 2024 8:41 PM UTC

Hi Leo,

Thanks for your suggestions, I'll try them.

(I posted here because I saw a different post w/ a similar issue and there was some answer from an Adobe employee)

Signing InDesign extensions - Adobe Community - 14560327

Translate
James Gifford—NitroPress
Legend
Jul 16, 2024 4:55 PM UTC

I don't think anyone here, user or visiting Adobe rep, would have anything to say about the update of a tool or plug-in. As with all such third-party elements, you're best off contacting, well, that third party. 🙂

Translate
mgnituraAuthor
Participant
Jul 17, 2024 8:36 PM UTC

Hi James,

The reason why I posted the question in this forum, is because that 'third party tool or plug-in' is actually provided by Adobe (you can download it from the CEP Resources). There was also a similar question placed as well.

Translate
James Gifford—NitroPress
Legend
Jul 17, 2024 8:40 PM UTC

Okay, I was a little off-target but it's still pretty back-room/specialized. I'd doubt that any user here (and this is a user-to-user forum) has any special knowledge or expertise with Adobe's array of plugins.

 

(I did, obviously, read it as a third-party applet, and it's mildly exasperating sometimes to have someone complain here because XYZcorp hasn't updated the PinkUnderlinesToGo plugin for ten years. I blame the heat. 🙂 )

Translate