Skip to content

Commit 8e79847

Browse files
faustbrianclaude
andauthored
Add Azure Trusted Signing documentation for Windows builds (#187)
* Add Azure Trusted Signing documentation for Windows builds - Document Azure Trusted Signing as the recommended Windows code signing method - Add all required Azure environment variables with descriptions - Note that credentials are automatically stripped for security - Keep traditional certificate signing as an alternative option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]> * Update Azure Trusted Signing documentation with build output indicators - Add information about identifying signing method from build output - Include detailed descriptions for each Azure configuration value - Change default endpoint example to East US (more common) - Clarify the difference between certificate profile and account names 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]> --------- Co-authored-by: Claude <[email protected]>
1 parent d444a69 commit 8e79847

File tree

1 file changed

+39
-1
lines changed

1 file changed

+39
-1
lines changed

resources/views/docs/desktop/1/publishing/building.md

Lines changed: 39 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,45 @@ NativePHP makes this as easy for you as it can, but each platform does have slig
9696

9797
### Windows
9898

99-
[See the Electron documentation](https://www.electronforge.io/guides/code-signing/code-signing-windows) for more details.
99+
NativePHP supports two methods for Windows code signing: traditional certificate-based signing and Azure Trusted Signing.
100+
101+
#### Azure Trusted Signing (Recommended)
102+
103+
Azure Trusted Signing is a cloud-based code signing service that eliminates the need to manage local certificates.
104+
105+
When building your application, you can identify which signing method is being used:
106+
- **Azure Trusted Signing**: The build output will show "Signing with Azure Trusted Signing (beta)"
107+
- **Traditional Certificate**: The build output will show "Signing with signtool.exe"
108+
109+
To use Azure Trusted Signing, add the following environment variables to your `.env` file:
110+
111+
```dotenv
112+
# Azure AD authentication
113+
AZURE_TENANT_ID=your-tenant-id
114+
AZURE_CLIENT_ID=your-client-id
115+
AZURE_CLIENT_SECRET=your-client-secret
116+
117+
# Azure Trusted Signing configuration
118+
# This is the CommonName (CN) value - your full name or company name
119+
# as entered in the Identity Validation Request form
120+
NATIVEPHP_AZURE_PUBLISHER_NAME=your-publisher-name
121+
122+
# The endpoint URL for the Azure region where your certificate is stored
123+
NATIVEPHP_AZURE_ENDPOINT=https://eus.codesigning.azure.net/
124+
125+
# The name of your certificate profile (NOT the Trusted Signing Account)
126+
NATIVEPHP_AZURE_CERTIFICATE_PROFILE_NAME=your-certificate-profile
127+
128+
# Your Trusted Signing Account name (NOT the app registration display name)
129+
# This is the account name shown in Azure Trusted Signing, not your login name
130+
NATIVEPHP_AZURE_CODE_SIGNING_ACCOUNT_NAME=your-code-signing-account
131+
```
132+
133+
These credentials will be automatically stripped from your built application for security.
134+
135+
#### Traditional Certificate Signing
136+
137+
For traditional certificate-based signing, [see the Electron documentation](https://www.electronforge.io/guides/code-signing/code-signing-windows) for more details.
100138

101139
### macOS
102140

0 commit comments

Comments
 (0)