From 795df26bc7fdfa388fa943bef22547767fa4d1bb Mon Sep 17 00:00:00 2001
From: Aditya Patwardhan <adityap@microsoft.com>
Date: Mon, 2 Jun 2025 10:03:09 -0700
Subject: [PATCH] Revert "Add windows signing for pwsh.exe" (#25586)

---
 .pipelines/templates/obp-file-signing.yml | 25 -----------------------
 1 file changed, 25 deletions(-)

diff --git a/.pipelines/templates/obp-file-signing.yml b/.pipelines/templates/obp-file-signing.yml
index b77c991cf1..b6683d3caa 100644
--- a/.pipelines/templates/obp-file-signing.yml
+++ b/.pipelines/templates/obp-file-signing.yml
@@ -84,31 +84,6 @@ steps:
     files_to_sign: '**\*.psd1;**\*.psm1;**\*.ps1xml;**\*.ps1;**\*.dll;**\*.exe;**\pwsh'
     search_root: $(Pipeline.Workspace)/toBeSigned
 
-- task: onebranch.pipeline.signing@1
-  displayName: Sign pwsh.exe with Windows cert
-  inputs:
-    command: 'sign'
-    cp_code: '203'
-    files_to_sign: '**\pwsh.exe'
-    search_root: $(Pipeline.Workspace)/toBeSigned
-
-- pwsh: |
-    if (Test-Path $(Pipeline.Workspace)/toBeSigned/pwsh.exe) {
-      Write-Verbose -Verbose "pwsh.exe is found, verifying signature"
-      $signature = Get-AuthenticodeSignature -FilePath $(Pipeline.Workspace)/toBeSigned/pwsh.exe
-      if ($signature.SignerCertificate.Issuer -notmatch '^CN=Microsoft Windows Production.*') {
-        Write-Error -ErrorAction Stop "pwsh.exe is not signed by Microsoft"
-      }
-      else {
-        Write-Verbose -Verbose "pwsh.exe is signed by Microsoft"
-      }
-    }
-    else {
-      Write-Verbose -Verbose "pwsh.exe is not found, skipping"
-    }
-
-  displayName: 'Verify windows signature'
-
 - pwsh : |
     Get-ChildItem -Path env: | Out-String -width 9999 -Stream | write-Verbose -Verbose
   displayName: Capture environment