Use PME for esrp signing (#6208)

microsoft · Mar 3, 2025 · d8c2f76 · d8c2f76
1 parent fac60ed
commit d8c2f76
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/eng/tsp-core/pipelines/templates/signing/sign.yml b/eng/tsp-core/pipelines/templates/signing/sign.yml
@@ -13,11 +13,12 @@ steps:
   - task: EsrpCodeSigning@5
     displayName: ${{ parameters.displayName }}
     inputs:
-      ConnectedServiceName: "Azure SDK Engineering System"
-      AppRegistrationClientId: "5e796b8d-3c4d-4e28-93f6-12a44f4368a0"
-      AppRegistrationTenantId: "72f988bf-86f1-41af-91ab-2d7cd011db47"
-      AuthAKVName: "AzureSDKEngKeyVault"
-      AuthCertName: "azure-sdk-esrp-signing-auth-certificate"
+      ConnectedServiceName: "Azure SDK PME Managed Identity"
+      UseMSIAuthentication: true
+      AppRegistrationClientId: "4fa2001b-ad7a-4a1e-9185-d6ea881f8712"
+      AppRegistrationTenantId: "975f013f-7f24-47e8-a7d3-abc4752bf346"
+      EsrpClientId: "5e796b8d-3c4d-4e28-93f6-12a44f4368a0"
+      AuthAKVName: "kv-azuresdk-codesign"
       AuthSignCertName: "azure-sdk-esrp-signing-certificate"
       FolderPath: ${{ parameters.path }}
       Pattern: ${{ parameters.pattern }}