I tested the MSI and it's functional, although the signing identity looks like this

The random name there is probably because you need to pass a

/d

argument to

signtool

. See https://stackoverflow.com/questions/4315840/the-uac-prompt-shows-a-temporary-random-program-name-for-msi-can-the-correct-na (I ran that riddle trail for launcher a bit ago) cc: @thor

Good to know! Code signing is the worst

Got it. Yeah I did not know this and have never used that flag, but i'll update my scripting and regen these!

I shipped kolide’s agent for a year like that. Then dug to find the option. ¯\_(ツ)_/¯

rest assured, my script has been updated with quite a few things tonight. I'm rebuilding now, they should be done later tonight and I should be able to drop them here tomorrow sometime