that require HSM stored keys. For automation purposes, I am trying to use an Azure KeyVault stored certificate rather than the USB hardware token. This means that
for local installation of the certificate.
Because of this, I am looking for a way to use the Azure KeyVault stored certificate for code signing an
.app file. The best option that I've been able to find so far is
AzureSignTool as a replacement for the classic Microsoft
SignTool.
I've managed to get the certificate ordered and installed in the
Azure KeyVault and can use AzureSignTool to successfully sign standard windows executable files (.exe, .dll, .msi).
However, the AzureSignTool can not sign .app files because it's not a supported format. Is there any workaround out there to either use the old SignTool + Azure KeyVault hosted cert or some other tool to use a cloud hosted (preferably Azure KeyVault) code signing certificate for signing .app files?
AzureSignTool works correctly if signing an .exe but when trying a .app file, it returns error.
