In order to sign Microsoft Dynamic Extensions, the .app files, you have installed Microsoft Dynamics at least the demo version.

Then the .app file can be signed with the below tools:

Micosoft Signtool.
Azure Signtool.
Sign Code (.net)

1. For downloading and installing a demo version of Microsoft Dynamics.

Navigate to https://www.microsoft.com/en-us/download/details.aspx?id=105617

2. Click “Download”

3. Click here.

4. Click “Download”

5. When it is downloaded install the program on you computer

6. Now the Microsoft Dynamics is installed and you can sign the .app file with the following programs:

Microsoft Signtool (only Token Based ).

Command for signing with Microsoft Signtool:

./signtool sign /a /fd sha256 /tr http://timestamp.globalsign.com/tsa/r6advanced1 /td SHA256 "Path\to\your\file"

Command for signing with Azure Signtool:

azuresigntool sign –kvu "Key_Vault_URI" -kvt "Directory_ID" -kvc " Certificate_Friendly_Name" -kvi Application_ID -kvs "AzureSigntool_Secret" -tr http://timestamp.globalsign.com/tsa/r6advanced1 -td sha256 "Path\to\file"

Command for signing with Sign Code:

sign code azure-key-vault --azure-key-vault-url "https://MyKeyvault.vault.azure.net/ --azure-key-vault-certificate "Friendly_Name_of_the_Certificate" --azure-key-vault-client-id "Azure_Client_ID" --azure-key-vault-client-secret "AzureSignTool_Secret" --azure-key-vault-tenant-id "The_ID_of_MicrosoftEntraId"  --verbosity Information "C:/Path/To/File(s)"