Signing setup with CERN key