I am using a Sectigo EV certificate and USB key to sign Windows code. I just locked myself out of the token and I am in the middle of a rollout! I know what I have to do. I’m just pissed off at myself for doing it.

Since I have to get a new EV cert, is there a better way to go about Windows code signing? It seems ridiculous that in 2024, I am bound to a tiny physical thing and that it bricks itself after only 3 password attempts. Then I need to wait for Monday morning to talk to a physical person and beg them to overnight a new one. Are we still in the 80s here?

Since I have to do it all over again, is there a better way?

My only goal is to have the general public install my software without the security warning in Windows 11.

Thanks for listening.