Release Engineering

Since private key is on physical smartcard device, the key is tied to one physical location, making signing from multiple machines impossible.

One way to bypass the restriction is to provide vpn access for Xisco to my local machine, preferably using a tdf-hop.

Alternatively / if we cannot make that work, getting an additional signing certificate from certum would be another option.

(assigning to Xisco, just for ease of feedback-loop, initial steps are on my end)
Ideally we'll have that sorted out mid October/for the 6.4 cycle.