diff --git a/eng/Signing.props b/eng/Signing.props
new file mode 100644
index 000000000000..512b976e5777
--- /dev/null
+++ b/eng/Signing.props
@@ -0,0 +1,16 @@
+<Project>
+  <PropertyGroup>
+    <UseDotNetCertificate>true</UseDotNetCertificate>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- Sign cab files embedded inside MSI containers with Authenticode -->
+    <FileExtensionSignInfo Include=".cab" CertificateName="Microsoft400" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ItemsToSign Include="$(ArtifactsShippingPackagesDir)\**\*.msi" Condition="'$(PostBuildSign)' != 'true'" />
+    <ItemsToSign Include="$(ArtifactsShippingPackagesDir)\**\*.wixpack.zip" Condition="'$(PostBuildSign)' != 'true'" />
+    <ItemsToSignPostBuild Include="$(ArtifactsShippingPackagesDir)\**\*.msi" Condition="'$(PostBuildSign)' == 'true'" />
+  </ItemGroup>
+</Project>