Skip to main content

Interface: WindowsAzureSigningConfig

The signtool /dlib Azure Trusted Signing integration was introduced in toolsets.winCodeSign: 1.3.0. The legacy PowerShell integration is deprecated, but leverages the same underlying Azure APIs, so both interfaces share the same config shape.

Properties​

additionalMetadata?​

readonly optional additionalMetadata?: Record<string, string>

Additional fields to include verbatim in the metadata.json file passed to Azure.CodeSigning.Dlib.dll via signtool /dmdf. Use this for DLib-specific options not covered by the typed fields above (e.g. ExcludeCredentials, CorrelationId).

certificateProfileName​

readonly certificateProfileName: string

The name of the Trusted Signing Certificate Profile to sign with, as created in your Azure Code Signing Account. Maps to the DLib metadata field CertificateProfileName.

codeSigningAccountName​

readonly codeSigningAccountName: string

The name of the Azure Trusted Signing (Code Signing) Account that owns the certificate profile. Maps to the DLib metadata field CodeSigningAccountName.

endpoint​

readonly endpoint: string

The Trusted Signing Account endpoint. The URI value must align to the region your Trusted Signing Account and Certificate Profile were created in.

Requires Azure Entra ID environment variables per Microsoft's documentation.

fileDigest?​

readonly optional fileDigest?: string

The digest algorithm used to hash the files being signed. Maps to the DLib metadata field FileDigest.

Default​

SHA256

publisherName​

readonly publisherName: string

The publisher name to associate with the signature, exactly as it appears in the certificate issued by your Trusted Signing certificate profile. Required. Used for update verification (embedded in app-update.yml and checked by electron-updater) and must match the certificate subject.

See​

https://github.com/electron-userland/electron-builder/issues/1187#issuecomment-278972073

timestampDigest?​

readonly optional timestampDigest?: string

The timestamp digest algorithm. Translates to field: TimestampDigest.

Default​

SHA256

timestampRfc3161?​

readonly optional timestampRfc3161?: string

The RFC3161 timestamp server. Translates to field: TimestampRfc3161.

Default​

http://timestamp.acs.microsoft.com

type​

readonly type: "azure"

Discriminator selecting Azure Trusted Signing (cloud signing — no local certificate).