raaen
Posts: 1
Joined: Mon Mar 02, 2026 11:33 am

Installing Trusted Signing certificate to Trusted Publishers

Hi,

We are switching our code signing certificate to Azure Artifact Signing (formerly Azure Trusted Signing).
Implementing it in Advanced Installer works without issues for signing the MSI, included .exe files and custom action Powershell scripts.

To avoid warnings at install time when running custom action powershell scripts, we also need to install the certificate in the Trusted Publishers certificate store during install. Previously, we included the old code signing certificate in a temporary folder and installed it using a custom action. The certificates used with Azure Artifact Signing are shortlived (3 days), so we need to download the certificate as part of the Advanced Installer build process and include it in the installer.
Is there any way to do this with the built-in tools?

Thanks,

Rasmus
Catalin
Posts: 7794
Joined: Wed Jun 13, 2018 7:49 am

Re: Installing Trusted Signing certificate to Trusted Publishers

Hello Rasmus and welcome to our forums,

If you need to download the certificate before building it and add it to your project, you can do so via a "File download" first in Azure and then adding it to your project either via the CLI COM or PowerShell COM support.

AddFile command option

IFilesComponent - PowerShell

Hope this helps!

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Building Installers”