diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 60b4813..e912f45 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -188,6 +188,7 @@ jobs:
       - name: Setup
         shell: bash
         run: |
+          dotnet tool install --global AzureSignTool
           go generate ./...
       - name: Build amd64
         env:
@@ -199,6 +200,7 @@ jobs:
           mkdir -p release
           ZIP_OUTPUT=release/walletd_${GOOS}_${GOARCH}.zip
           go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/walletd
+          azuresigntool sign -kvu "${{ secrets.AZURE_KEY_VAULT_URI }}" -kvi "${{ secrets.AZURE_CLIENT_ID }}" -kvt "${{ secrets.AZURE_TENANT_ID }}" -kvs "${{ secrets.AZURE_CLIENT_SECRET }}" -kvc ${{ secrets.AZURE_CERT_NAME }} -tr http://timestamp.digicert.com -v bin/walletd.exe
           cp README.md LICENSE bin/
           7z a $ZIP_OUTPUT ./bin/*
       - uses: actions/upload-artifact@v3