diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 44649449d..7931d34e2 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -39,6 +39,11 @@ parameters:
     type: boolean
     default: true
 
+variables:
+  # Required by MicroBuild template
+  - name: TeamName
+    value: "Azure Tools for VS Code"
+
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
   parameters:
diff --git a/.azure-pipelines/SignExtension.signproj b/.azure-pipelines/SignExtension.signproj
new file mode 100644
index 000000000..2207d6386
--- /dev/null
+++ b/.azure-pipelines/SignExtension.signproj
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="Current" Sdk="Microsoft.Build.NoTargets/3.7.56">
+  <PropertyGroup>
+    <TargetFramework>net8.0</TargetFramework>
+  </PropertyGroup>
+  <ItemGroup>
+    <!-- FilesToSign needs to be inside $(OutDir) hence we copy it into
+    $(OutDir) before (from CWD) and move it back outside after the signing -->
+    <FilesToSign Include="$(OutDir)\extension.signature.p7s">
+      <!-- Add the certificate friendly name below -->
+      <Authenticode>VSCodePublisher</Authenticode>
+    </FilesToSign>
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.VisualStudioEng.MicroBuild.Core" Version="1.0.0">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+  <Target Name="CopySignatureFile" BeforeTargets="SignFiles">
+    <Copy SourceFiles="$(ProjectDir)\..\extension.manifest" DestinationFiles="$(OutDir)\extension.signature.p7s" />
+  </Target>
+
+  <Target Name="CopyBackSignatureFile" AfterTargets="SignFiles">
+    <Copy SourceFiles="$(OutDir)\extension.signature.p7s" DestinationFiles="$(ProjectDir)\..\extension.signature.p7s" />
+  </Target>
+</Project>