# How to sign aax with an cloud EV cert on Windows

**URL:** https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451
**Category:** Windows
**Created:** [May 30, 2023, 11:16am UTC](https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451 "2023-05-30T11:16:31Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![moritzsur](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@moritzsur](https://forum.juce.com/u/moritzsur)
#### Post date: [May 30, 2023, 11:16am UTC](https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451/1 "2023-05-30T11:16:31Z")

</div>

If anybody knows how to sign aax plugins with the tool provided by pace with an cloud EV cert (in azure, thanks for the tutorial @sudara ) please let me know 🙂.  
Or is it possible to sign the aax plugin with a selfsigned or macos certificate? Our OV certificate is expired.

---

<div class="post-metadata">

### Author: ![asimilon](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.juce.com/asimilon/32/4235_2.png) [@asimilon](https://forum.juce.com/u/asimilon)
#### Post date: [May 30, 2023, 11:20am UTC](https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451/2 "2023-05-30T11:20:53Z")

</div>

You’ll need to speak with PACE about this. I got as far as them wanting to schedule a call with someone from sales, at which point I realised it must be[1] a paid offering to enable such a workflow and left it there.

Other than that I don’t think anyone can legally talk about this anyway because of the NDA.

[1] - edit: probably… don’t take my word for it 😂

---

<div class="post-metadata">

### Author: ![daniel](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.juce.com/daniel/32/790_2.png) [@daniel](https://forum.juce.com/u/daniel)
#### Post date: [May 30, 2023, 2:59pm UTC](https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451/3 "2023-05-30T14:59:04Z")

</div>

Hehe yeah, you didn’t buy anything just from talking to them. I would always recommend talking to them over trusting information circulating the internet. They are nice and helpful people.

And yes, I bailed from the paid plan too for other reasons.

It is possible to sign on self hosted runners from github actions with the dongle without the higher tiers.  
But I don’t know the answer about which certificate is required. We used an OV, as this is cheaper at the entry. We will see how smart screen behaves and then reconsider if we upgrade to EV.

I read somewhere, that technically even the macos cert would work on windows, but it sounds twiddly… certainly not the recommended route.

---

<div class="post-metadata">

### Author: ![moritzsur](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@moritzsur](https://forum.juce.com/u/moritzsur)
#### Post date: [May 31, 2023, 2:16pm UTC](https://forum.juce.com/t/how-to-sign-aax-with-an-cloud-ev-cert-on-windows/56451/4 "2023-05-31T14:16:31Z")

</div>

Update: I didnt find a way to use a Azure cert with PACE, but it still works with the macos cert. (also using the dongles since Im using self hosted runners anyways)
