Hello guys,
Unfortunately, this has not yet been implemented in Advanced Installer.
However, I have highlighted your request once again in today's status meeting and we will be starting our investigations & research soon on this matter.
As I am not experienced with Azure Key Vault, I will need your guys' feedback, so we can try to smooth this process as much as possible and also to be sure you guys will get what you need.
So far, from my research, what I found about Azure Key Vault is that it is basically a place where you can store your certificates in the cloud (please correct me if I'm wrong).
If possible, could you please elaborate a bit on the authentication method? How would you like Advanced Installer to be able to authenticate into the key vault?
Also, as you guys may know, we are currently using the
signtool.exe tool that comes with the Windows SDK. Unfortunately, this tool does not support signing with a certificate from a key vault.
After further research, I have found out that there actually exists a tool capable of signing a resource using a certificate from a key vault, named
AzureSignTool.exe.
One of our main focuses right now is enabling the
Device Guard signging.
As I am not very familiar with these, this looks similar to what you guys have requested. If possible, could you please have a look on the above article and let me know if this would help you in any way?
Looking forward to hearing from you!
Best regards,
Catalin