[Suggestion] Add Code Signing Certificates to policy

[Matthew-Cherry87]

It would be great if the WDAC wizard allowed for the importing of code signing certificates for signing binary files.

When creating a new WDAC Policy requiring signed system integrity policy, we still need to manually run the Add-SignerRule cmdlet to add the authorised code signing certificates.

It'd be great if signer rules could be created as custom rule conditions OR when a user disables unsigned integrity policy within the Policy Rules page a prompt is automatically created requesting the user to select the code signing certificates they wish to add.

Appreciate the work!

[jgeurten]

I love both suggestions! This lack of this experience is the reason for hardcoding that policies must have the unsigned option set since converting to binary file will fail without a PolicySigners section