Integration > PKCS11 APK Signing
PKCS11 APK Signing
Android application packages (.apk) are signed with Android’s APKSigner tool, which can be backed by keys accessed through a PKCS#11 interface rather than a local keystore file.
Use Cases
Sign Android APK files for release while keeping private keys off the build machine.
PKCS#11-Backed Signing
Reaches HSM-held keys through Java’s SunPKCS11 provider, with no changes to APKSigner itself.
Cross-Platform Setup
Supports Linux (Ubuntu), macOS, and Windows build environments.
Central Audit
Centrally records and audits every APK signing operation.
Integrations and Resources
CodeSign Secure
PKCS11 APK Signing
Signs Android APK files using PKCS#11-backed keys through Android’s APKSigner tool.