Azure Artifact Signing Options

The Azure Artifact Signing Options dialog box allows you to set the options that InstallMate uses when it runs the Microsoft SignTool tool to sign the installation packages for the current package, using a certificate provided by your Microsoft Azure account.

See Digital Signatures for background information about code signing and digital signatures. For information about Azure ARtifact Signing, please refer to the Microsoft documentation:

Dialog fields and options

This dialog box contains the following fields and options.

Field Description
Azure artifact signing certificate
Endpoint URI Enter the Azure endpoint URI associated with your Azure account, or use the drop-down list to select the appropriate Azure region by name. In the latter case, the region name will be automatically replaced by the corresponding URI when you close the dialog box.
Signing account name Enter the name of the Azure account that is used for artifact signing.
Certificate profile name Enter the name of the certificate profile that is used for artifact signing.
Azure account credentials (optional)
Tenant ID (Optional) Enter the tenant ID of your Microsoft Azure account.
Client ID (Optional) Enter the client (application) ID of an App Registration in the tenant.
Client secret (Optional) Enter the client secret that was generated for the App Registration.
Client certificate path (Optional) Enter the path to certificate and private key pair in PEM or PFX format, which can authenticate the App Registration. You can clisk the small ... (browse) button to browse for the file on your computer.
Certificate password (Optional) Enter the password protecting the certificate file; currently only supported for PFX (PKCS12) certificates.

Note: if you enter your Azure account credentials, they will be passed to SignTool via environment variables (using the EnvironmentCredential method). If you leave the credential fields empty, the Azure code signing will launch your web browser and prompt you to sign into your Azure account manually. This typically needs to be done only once.

If you do enter your Azure account credentials, then you should only enter one of the following combinations of authentication details:

  1. Tenant ID + Client ID + Client secret
  2. Tenant ID + Client ID + Client certificate path + (optional) Certificate password

Fields that are not used must be left empty.