Other similar posts suggest using AzureSignTool, however, AzureSignTool does not accept xlsm as a valid file type.
Previously we used the windows sign tool, however, new certificates are not exportable and so we cannot use this method anymore.
Our signing is done as part of a CI/CD pipeline in DevOps, so we would like to avoid having to manually sign the VBA using a fips device or yubikey if possible.
Tried using AzureSignTool but it says xlsm is an unsupported file type.
Signing a digest file is not enough as excel security settings will reject any macros that aren't signed.
Can't use the exported certificate with signtool as it does not include the private key.
from How do I sign an xlsm file with an Azure KeyVault stored certificate after June 2023?
No comments:
Post a Comment