BlackVault CYNR

The BlackVault CYNR is a “plug-n-play” code and document signing appliance that brings a new level of security, simplicity, and structure to code and document signing. Signing and timestamping have never been as easy or secure as with this purpose built platform that includes a smart card reader, USB host port, touch screen display and cryptographically advanced FIPS 140-2 Level 3+ Hardware Security Module (HSM).

Ensure your code and documents are highly secure, and meet internal and external processes and compliance objectives with the easy to use and intuitive BlackVault CYNR.

The BlackVault CYNR boots as a signing appliance; once initialized, simply load the code or document to be signed, use the integrated touch screen display to select (or create) the signing key, then execute. The signed code or document is ready for publishing, avoiding the complexity with secure installation and configuration of general purpose operating systems and HSMs.

The BlackVault CYNR supports self-signed and certificate-signed operations. Obtaining digital certificates (trust path to a certificate authority) is facilitated by the Certificate Signing Request (CSR) feature. Ready to submit CSRs are generated and sent to the USB port or a network attached folder. Once the certificate is received from your Certificate Authority (CA) simply import it into the BlackVault CYNR.

Ensuring proper authorization prior to code or document signing is a key capability of the BlackVault CYNR. The intuitive touch screen display with randomized keypad provides a certified trust path for configuration, PIN entry, and backup operations.

In addition, the integrated smart card reader facilitates two-factor authentication, and advanced “M of N” Quorum approval.  This ensures that no single individual can represent the enterprise and release reputation damaging code or documents.

Constantly updated configuration and operation information provide Security Administrators with the data to discover anomalous activity or failure of critical functions. Audit information can be sent to a trusted entity and is protected to prevent unauthorized access, modification, or deletion.

Behind the scenes of the BlackVault CYNR is an integrated military grade HSM that creates, stores, and logs private key and digital signature information in its highly secure Level 3+ tamper reactive crypto boundary.

Additionally, if the CA certificate changes, the EST client will notice the change and automatically obtain the new certificate. This process of auto re-enrollment and CA redistribution is faster and less work intensive than previous certificate management protocols.

Maintaining the security of the private code signing key is of critical importance to the developer and the end user. If a developer leaves their keystore and passwords in an unsecured location such that a third-party could find and use them, a developer's authoring identity and the trust of their customers is vulnerable to compromise.

Injecting malicious code into legitimate applications is a powerful tool available to cyber attackers. The third-party could sign and distribute apps that maliciously replace your authentic apps with ones that corrupt, steal user data, and attack other apps or the system itself.

It is increasingly important to ensure private keys associated with these digital signatures are secure for an extended period of time. An Android Developer's private key is required for signing all future versions of their app. Updates to their existing app requires the original code signing key.

BlackVault CYNR, with a 10 year battery backed key store, makes App signing a highly secure and easy to implement solution for JAVA and Android apps.

BlackVault CYNR's Smart Card interface with 2-Factor "M of N" authentication makes the establishment of a Quorum for code or document signing inherently straight forward.

In order to conduct a signing, the required minimum number of members of the organization must have physically logged in.

This ensures that no single individual is able to represent the organization. The fate of a company is not dependent upon the disposition of one person.