There is a bunch of manual steps described in section 3.7.1 Signing OpenCL Images under the Security User guide for Intel® FPGA Programmable Acceleration Card D5005.
This process has been automated by creating a script that runs all these steps for you.
Copy the script at a known location with the Intel® Acceleration Stack installation.
Usage information as below:
1) For creating signed aocx run command :
./sign_aocx.sh [[[-H hsm_manager] [-i input_file ] [-r
rootpublickey][-k cskkey] [-o output_file]]]| [-h]]
2) For creating unsigned images run command :
./sign_aocx.sh [[[-H hsm_manager] [-i file ] [-r NULL]
[-k NULL] [-o output_file]