diff --git a/tools/releaseBuild/signing.xml b/tools/releaseBuild/signing.xml
index 11f63fe69c..a6b19f6a07 100644
--- a/tools/releaseBuild/signing.xml
+++ b/tools/releaseBuild/signing.xml
@@ -21,6 +21,8 @@
 
     <!-- ****Begin**** AuthenticodeFormer ************* -->
 
+    <!-- be sure to sign the global tool shim -->
+    <file src="__INPATHROOT__\Microsoft.PowerShell.GlobalTool.Shim.exe" signType="AuthenticodeFormer" dest="__OUTPATHROOT__\Microsoft.PowerShell.GlobalTool.Shim.exe" />
     <file src="__INPATHROOT__\pwsh.exe" signType="AuthenticodeFormer" dest="__OUTPATHROOT__\pwsh.exe" />