https://docs.aws.amazon.com/cloudhsm/latest/userguide/initialize-cluster.html


https://docs.aws.amazon.com/cloudhsm/latest/userguide/signtool-sdk5.html

https://support.globalsign.com/code-signing/code-signing-windows-builds-using-signtool-and-aws-cloud-hsm

```
2shcqo7mni5

aws cloudhsmv2 describe-clusters --filters clusterIds=cluster-2shcqo7mni5 --query 'Clusters[0].Certificates.ClusterCsr' --output text > cluster-2shcqo7mni5_ClusterCsr.csr


dos2unix cluster-2shcqo7mni5_ClusterCsr.csr

openssl req -in cluster-2shcqo7mni5_ClusterCsr.csr -noout -text

openssl genrsa -aes256 -out customerCA.key 2048

openssl req -new -x509 -days 3652 -key customerCA.key -out customerCA.crt


openssl x509 -req -days 3652 -in cluster-2shcqo7mni5_ClusterCsr.csr -CA customerCA.crt -CAkey customerCA.key -CAcreateserial -out cluster-2shcqo7mni5_CustomerHsmCertificate.crt



aws cloudhsmv2 initialize-cluster --region us-west-2 --cluster-id cluster-2shcqo7mni5 --signed-cert file://cluster-2shcqo7mni5_CustomerHsmCertificate.crt --trust-anchor file://customerCA.crt


aws cloudhsmv2 initialize-cluster --region <region> --cluster-id cluster-2shcqo7mni5 --signed-cert fileb://cluster-2shcqo7mni5_CustomerHsmCertificate.crt --trust-anchor fileb://customerCA.crt



aws cloudhsmv2 create-hsm --cluster-id cluster-2shcqo7mni5 --availability-zone "us-west-2b"


AuthorizeSecurityGroupIngress


.\cloudhsm-cli.exe --cluster-id cluster-2shcqo7mni5 interactive 



C:\ProgramData\Amazon\CloudHSM

aws cloudhsmv2 describe-clusters --query 'Clusters[?ClusterId==`cluster-2shcqo7mni5`].[Hsms[0].HsmId, Hsms[0].State]' --output table
aws cloudhsmv2 describe-clusters --query 'Clusters[?ClusterId==`cluster-2shcqo7mni5`].[ClusterId,State]' --output table

aws cloudhsmv2 describe-clusters --query 'Clusters[?ClusterId==`cluster-2shcqo7mni5`].[ClusterConfig]' --output text

aws cloudhsmv2 describe-clusters --query 'Clusters[?ClusterId==`cluster-2shcqo7mni5`].ClusterCerts.Downloadable' --output text
aws cloudhsmv2 describe-clusters --query 'Clusters[].ClusterId' --output text



.\configure.exe -a 172.31.20.98


.\cloudhsm_mgmt_util.exe "C:\ProgramData\Amazon\CloudHSM\data\cloudhsm_mgmt_util.cfg"

start "cloudhsm_client" .\cloudhsm_client.exe "C:\ProgramData\Amazon\CloudHSM\data\cloudhsm_client.cfg"

loginHSM -u CU -s digicert -p 321digicert420


.\set_cloudhsm_credentials.exe --username digicert --password 321digicert420

certreq.exe -new .\digicert_csr.inf digicert_request.csr

.\configure.exe -a 172.31.20.98


.\cloudhsm_mgmt_util.exe "C:\ProgramData\Amazon\CloudHSM\data\cloudhsm_mgmt_util.cfg"

start "cloudhsm_client" .\cloudhsm_client.exe "C:\ProgramData\Amazon\CloudHSM\data\cloudhsm_client.cfg"

loginHSM -u CU -s digicert -p 321digicert420


.\set_cloudhsm_credentials.exe --username digicert --password 321digicert420

certreq.exe -new .\digicert_csr.inf digicert_request.csr



certreq.exe -accept bigscreen_inc.p7b

Copy 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\signtool.exe' '.\node_modules\electron-winstaller\vendor\signtool.exe'

node installers/windows/winstaller.js

& 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\signtool.exe' sign /debug /v /fd sha384 /sha1 26AF5CC87579EC07AB7863D234EA74D7D0E4668B /tr http://timestamp.digicert.com /td sha384 "C:\Users\Administrator\Desktop\a.exe"
& 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\signtool.exe' sign /debug /v /fd sha256 /sha1 26AF5CC87579EC07AB7863D234EA74D7D0E4668B /tr http://timestamp.digicert.com /td sha256 "C:\Users\Administrator\Documents\GitHub\unity-pc-alpha-2020.3.33f1\Native\remote-desktop-client\dist\win-unpacked\BigscreenRemoteDesktop.exe"

& 'C:\Users\Administrator\Documents\GitHub\unity-pc-alpha-2020.3.33f1\Native\remote-desktop-client\node_modules\electron-winstaller\vendor\signtool.exe' sign /v /tr http://timestamp.digicert.com /fd sha384 /sha1 26AF5CC87579EC07AB7863D234EA74D7D0E4668B /td sha384 /a "C:\Users\Administrator\AppData\Local\SquirrelTemp\temp?\lib\net45\BigscreenRemoteDesktop_ExecutionStub.exe"

node installers/windows/winstaller.js

```