| Consideration | OV Code Signing | EV Code Signing |
|---|---|---|
| Publisher identity | Organization verification | Extended organization verification |
| Applicant requirements | Provider specific organization requirements | More extensive organization checks |
| Key protection | Approved hardware or cloud method | Approved hardware or cloud method |
| Automation | Depends on signing method and authentication | Depends on signing method and authentication |
| SmartScreen warnings | No guarantee of removal | No guarantee of removal |
| Best next step | Explore OV → | Explore EV → |
How will you protect the private key?
Cloud signing
Use a provider hosted signing service. Check authentication, signing limits and automation support.
USB token
Protect the private key on a physical device. Confirm client software, delivery and access requirements.
HSM signing
Use supported hardware security infrastructure. Confirm provider approval and technical compatibility.