Skip to main content
Ctrl+K
Logo image

Releng Docs

  • Tutorials
    • Day 1 checklist
  • How To
    • Release
      • Firefox
        • Partner Repacks and EME Free
        • Off-Cycle Partner Repacks and Funnelcakes
      • Mozilla VPN
      • Addons
        • Langpack Submission Pipeline
        • XPI Signing Pipeline
        • OpenH264 updates
        • Widevine updates
      • Adhoc
    • Perform Release Duty
      • Updating one ESR version to another
      • Desktop Flatpak Releases
      • Desktop Releases
      • Run staging releases
      • Merge Duty
      • Merge Duty for major ESR bump
      • Interrupt Duty
    • Administer Firefox-CI
      • Uploading an image
      • Troubleshooting Workers
      • Taskcluster command line interface (CLI)
      • Testing and Customizing Release Promotion actions
      • Known Problems
      • CI-Admin
      • FirefoxCI cluster upgrades
      • Taskcluster Staging
    • Handle Emergencies
      • Manually submit a release with the Ship It API
      • Manually Beetmove Files
      • Manually Generate Partials
      • Purging the Partials Cache
      • Recover From Expired Artifacts
    • Rotate
      • Firefox GPG Signing Key
      • Rotate hg.m.o cert
    • Troubleshoot
      • Expiration Notifications
      • Analyze Update Verify Logs
    • Test
      • Updates
      • Autograph
    • Create
      • New Scriptworker-Script
      • New Package Format
      • Google Play Deployments
    • Manage L10n
      • L10n-Bumper
      • L10n Cross-channel
      • L10n Repacks
      • Langpacks
      • Android L10n
    • Upload to Internal Pypi
  • Explanations
    • Best Practices
      • Project Standards
      • Cross-training
      • Bug Triage
      • Handoffs and Incident Response
      • Security Best Practices
      • Sharing Terminal Sessions
    • Firefox-CI & Taskcluster
      • How Tasks are Triggered
      • Scopes
      • Rerun vs Retrigger
    • Balrog & Updates
      • Balrog and Scheduled Changes
      • Change Update to Last Known Good
      • win32-win64 migration
      • Ending Firefox Support for an Operating System
    • Signing
      • Signing Cert Levels and Best Practices
      • Notarization
      • Inventory and Archival
    • L10n and Release Engineering
    • Mozharness
    • Slide Decks
    • Releng Test Environments
    • Tree Closing Window
  • Reference
    • Access Control
    • Machine Users
    • Production & Staging Logs
    • Releng Changelog
    • External Docs
      • Balrog
      • CloudOps Contact Info
      • Firefox L10n
      • Partner Repacks
      • Releng Mana
      • Scriptworker
      • Scriptworker Scripts
      • Scriptworker-scripts Wiki (mac signing procedures)
      • Taskgraph
      • Treeherder
  • Meta
    • Community Participation Guidelines
    • Add a new repo to docs
    • Add existing repo to docs
    • Maintaining this Documentation
  • .rst

Signing

Signing#

Signing Mana page

Contents:

  • Signing Cert Levels and Best Practices
    • Levels / cert types
    • Caveats
  • Notarization
    • Machine and maintenance
    • General workflow
    • Debugging
    • Escalation
    • Links
  • Inventory and Archival
    • Archival in the Safe

previous

Ending Firefox Support for an Operating System

next

Signing Cert Levels and Best Practices

By Mozilla Release Engineering

© Copyright 2023, Mozilla Release Engineering.