diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 640bc8df..2a866e13 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -360,6 +360,8 @@ jobs:
       if: github.event_name == 'push' && (startsWith(github.ref, 'refs/tags'))
       shell: powershell
       run: |
+        choco install osslsigncode -y
+
         Get-FileHash $env:SM_CLIENT_CERT_FILE -Algorithm MD5
         smksp_registrar.exe list
         smctl.exe healthcheck
diff --git a/scripts/build-windows.mjs b/scripts/build-windows.mjs
index 32d97413..35d740fe 100755
--- a/scripts/build-windows.mjs
+++ b/scripts/build-windows.mjs
@@ -36,7 +36,7 @@ builder({
                     console.log('Signing', configuration)
                     if (configuration.path) {
                         try {
-                            const cmd = `smctl sign --keypair-alias=${keypair} --input "${String(configuration.path)}"`
+                            const cmd = `smctl sign --tool osslsigncode --keypair-alias=${keypair} --input "${String(configuration.path)}"`
                             console.log(cmd)
                             const out = execSync(cmd)
                             if (out.toString().includes('FAILED')) {