Clients tab
Both Code Sign Manager - Self-Hosted and Code Sign Manager - SaaS use a single universal client to sync signing keys and certificates to signing workstations.
By default, when users download the client from the Code Sign Client distribution page, the latest universal client is retrieved from the public download endpoint (dl.ngts.paloaltonetworks.com).
If you do not want the client download page to retrieve the latest client from the public download endpoint, uncheck Use Public Download Endpoint.
For instructions on how to set up local distribution of clients, see Manage Code Sign Client distribution.