Signing services

Here is an overview of the cloud signing services available:

AWS KMS

https://aws.amazon.com/kms/pricing/

• $1/month/key
• RSA 2048: $0.03 per 10000 requests
• HSM RSA 3072/4096, EC: $0.15 per 10000 requests
• Key only, no certificate stored
• Supported by Jsign

Azure Key Vault

https://azure.microsoft.com/en-us/pricing/details/key-vault/

• HSM RSA 2048 key: $1/month + $0.03 per 10000 transactions
• HSM RSA 3072/4096, EC: $5/month + $0.15 per 10000 transactions
• Certificate stored online
• Supported by Jsign

Azure Trusted Signing

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/trusted-signing-is-in-public-preview/ba-p/4103457

• Basic: $9.99/month for 5000 signatures, and then $0.005 per signature. 1 certificate
• Premium: $99/month for 100000 signatures, and then $0.005 per signature. 10 certificates
• Automatic certificate renewal
• Supported by Jsign
• Not compatible with jarsigner (root certificate not recognized, see https://github.com/openjdk/jdk/pull/23360)
• No EV certificates
• Only for 3+ years old US & Canada organizations

Certum

https://shop.certum.eu/data-safety/code-signing-certificates.html

• OV Open Source: 49€/year, 5000 signatures/month
• OV: 209€/year, 5000 signatures/month
• EV: 379€/year, 5000 signatures/month
• Not supported by Jsign

DigiCert KeyLocker

https://www.digicert.com/signing/compare-code-signing-certificates

• OV: $69/month for 1000 signatures per year
• EV: $89/month for 1000 signatures per year
• Certificate stored online
• Supported by Jsign

Entrust Signing Automation Service

https://store.entrust.com/default/certificate-services/code-signing/ov-ev-code-signing-as-a-service.html

• Service access: $200/year + $100 for 1000 signatures (+ $299 for an OV certificate, $399 for an EV certificate)
• Not supported by Jsign

Google Cloud KMS

https://cloud.google.com/kms/pricing

• HSM RSA 2048: $1/month + $0.03 per 10000 operations
• HSM RSA 3072/4096, EC: $2.5/month + $0.15 per 10000 transactions
• Key only, no certificate stored
• Supported by Jsign

Oracle Cloud

https://www.oracle.com/cloud/price-list/#key-management

• HSM protected Keys: 20 free keys + $0.5334/key/month
• Key only, no certificate stored
• Supported by Jsign

SSL.com eSigner

https://www.ssl.com/guide/esigner-pricing-for-code-signing/

• OV: $20/month for 20 signatures (or $180/year), and then $1 per signature.
• EV: $100/month for 10 signatures (or $900/year), and the $10 per signature
• Supported by Jsign