Reply To: Pushing our own firmware over the air to trackers built on a pre-certified LTE-M module

Keep the private signing key off the build server people log into. HSM or at least a separate box.