Signing a windows application in Mac Os using a private key located in Yubikey (Fips 140)

[pefka]

• Electron-Builder Version: 23.3.3

• Node Version: 16.8

• Electron Version: 21.3.1
• Electron Type (current, beta, nightly): current

• Target: Windows

Hello everyone, last year I built and signed a Windows application from under Mac Os, with the usual config, where I specified:
win: { "target": [ { "target": "nsis", "arch": [ "x64", "ia32" ] } ] , icon: "build/1024-logo-windows.png", signingHashAlgorithms: ['sha256'], certificateFile: "certificate/output.pfx", certificatePassword: process.env.WIN_CER_PASS }

Now due to new rules June 2023. I bought a Yubikey FIPS 140 usb hardware token. I passed verification and received files like: root certificate, server certificate, etc. from Comodo.

But I can’t export the private key from Yubikey and just to replace two lines in my config (certificateFile: && certificatePassword:).

Somehow, the electron builder should see that I have a connected flash drive, and that it should look for the private key in it. How to do it?
Which lines of the config should I change, what is the general logic of action?
Please help anyone who has encountered this.

[mmaietta]

I'm not familiar with the new ruleset, but there is a thread on implementing the new signing process. Have you taken a look at? #7605

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.