diff --git a/apps/cli/scripts/sign-cli.ps1 b/apps/cli/scripts/sign-cli.ps1
index 65b763f19ad..8e5417cf915 100644
--- a/apps/cli/scripts/sign-cli.ps1
+++ b/apps/cli/scripts/sign-cli.ps1
@@ -37,7 +37,7 @@ function SignExe {
     )
 
     echo "Signing $exePath ..."
-    azuresigntool sign -kvu $vaultUrl -kvi $clientId -kvt $tenantId -kvs $clientSecret -kvc $certName -tr $timestampService $exePath
+    dotnet tool run azuresigntool sign -kvu $vaultUrl -kvi $clientId -kvt $tenantId -kvs $clientSecret -kvc $certName -tr $timestampService $exePath
 }
 
 
diff --git a/apps/desktop/sign.js b/apps/desktop/sign.js
index f0110ea195b..2e5698302aa 100644
--- a/apps/desktop/sign.js
+++ b/apps/desktop/sign.js
@@ -4,7 +4,7 @@ exports.default = async function (configuration) {
   if (parseInt(process.env.ELECTRON_BUILDER_SIGN) === 1 && configuration.path.slice(-4) == ".exe") {
     console.log(`[*] Signing file: ${configuration.path}`);
     require("child_process").execSync(
-      `azuresigntool sign -v ` +
+      `dotnet tool run azuresigntool sign -v ` +
         `-kvu ${process.env.SIGNING_VAULT_URL} ` +
         `-kvi ${process.env.SIGNING_CLIENT_ID} ` +
         `-kvt ${process.env.SIGNING_TENANT_ID} ` +