Skip to content

Enable Real signing for official builds#168

Open
rmarinho wants to merge 1 commit intomainfrom
dev/ruimarinho/real-signing
Open

Enable Real signing for official builds#168
rmarinho wants to merge 1 commit intomainfrom
dev/ruimarinho/real-signing

Conversation

@rmarinho
Copy link
Copy Markdown
Member

Summary

Switch _SignType from test to Real in the official pipeline now that test signing has been validated.

What this does

  • Changes _SignType: test_SignType: Real in eng/pipelines/official.yml
  • Enables production Authenticode code signing via ESRP for all shipped assemblies and NuGet packages

First build notes

The first official build with Real signing will pause waiting for service connection approval:

  • DevDiv-ESRP-PME-DNCENG — ESRP code signing service
  • MicroBuild Signing Task (DevDiv) — MicroBuild signing plugin

Ask in the dnceng First Responders Teams channel to approve these. This is a one-time setup.

Test signing validated successfully. Switch to Real signing with
ESRP for production Authenticode signatures.

Note: First build will require service connection approval for
DevDiv-ESRP-PME-DNCENG and MicroBuild Signing Task (DevDiv).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@rmarinho rmarinho requested a review from rolfbjarne March 27, 2026 17:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants