Programmatically sigining Office documents' macros.

[Luke]

Hi,

I work in a huge IT company that produces numerous software builds everyday
containing Office documents (.doc, .xls, etc...) with macros. It is not
economic or efficient for us to manually sign each document for every build.

Is there a command line tool or an API for automated/programmatic signing of
Office documents' macros? If no, why not?

Thank you.

 

[JP]

My guess is no, because then nothing would stop a malicious program
from signing itself and destroying your computer.

--JP

 

[Luke]

The same argument can be made for executable files, yet Microsoft already
provides command line tools for signing those.

If a malicious program were to have access to a build environment, automated
signing of Office macros would be a relatively small worry. In any case, it
is the responsibility of the vendor using the tool to prevent malicious
software from accessing their machines, not Microsoft's responsibility.

 

[JP]

So you can programmatically sign an executable using an existing
digital certificate? I'd be grateful if you could provide a link.

--JP