Digicert USB token integration with Bamboo

[Margie Mounce]

Hello,

We need to sign our executables using a physical Digicert USB token for the certificate.  If I initiate the signing script manually, the code signs properly; however, if the same script is initiated from Bamboo, the signing fails with the following error:

SignTool Error:  No certificates were found that met all the given criteria.

Note that the EKU and expiry filters found 1 cert; however, when the Private Key filter was applied, 0 certs were left.

It seems that the automated Bamboo is seeing the public certificate, but doesn't have access to the private certificate (which is only available after the token is unlocked).  If the token is not unlocked, the Digicert Authentication Client should be triggering a login dialog, which never happens.  When running the script manually, the login dialog will appear.

[Sergey Podobry _Stellarity Software_]

It's tricky as Bamboo is running in a non-interactive session 0 and under another user than yours. I'm not sure that a USB token supports such scenario. Nowadays certificate vendors provide code signing in the cloud that works well with CI/CD. You can take a look into that direction.