# Signing artifacts with a cloud/remote keystore

**URL:** <https://hub.mender.io/t/signing-artifacts-with-a-cloud-remote-keystore/4296>\
**Category:** General Discussions\
**Tags:** mender-artifact, signature-artifacts\
**Created:** [November 10, 2021, 4:42pm UTC](https://hub.mender.io/t/signing-artifacts-with-a-cloud-remote-keystore/4296 "2021-11-10T16:42:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mho](https://avatars.discourse-cdn.com/v4/letter/m/a183cd/32.png) [@mho](https://hub.mender.io/u/mho)\
**Post date:** [November 10, 2021, 4:42pm UTC](https://hub.mender.io/t/signing-artifacts-with-a-cloud-remote-keystore/4296/1 "2021-11-10T16:42:42Z")

</div>

Does mender-artifact support signing using a cloud-based key? My current problem is that developers building Mender artifacts need to download the signing key locally in order to sign artifacts. Can we add support for cloud key signers like Google Cloud KMS? Is there a plan for this, or is it on the roadmap?

---

<div class="post-metadata">

**Author:** ![mho](https://avatars.discourse-cdn.com/v4/letter/m/a183cd/32.png) [@mho](https://hub.mender.io/u/mho)\
**Post date:** [November 11, 2021, 4:24pm UTC](https://hub.mender.io/t/signing-artifacts-with-a-cloud-remote-keystore/4296/2 "2021-11-11T16:24:23Z")

</div>

Well, here’s a PR that lays the groundwork for it: [Create a new signer using GCP's KMS by Michaelhobo · Pull Request #364 · mendersoftware/mender-artifact · GitHub](https://github.com/mendersoftware/mender-artifact/pull/364)