I\'ve set up my simple project in Visual Studio 2008 to use a ClickOnce installer. I\'ve specified that the ClickOnce manifests should be signed by our comapny\'s
Can you import your certificate into your Trusted Publisher store on the build machine? (Internet Explorer > Tools > Options > Content > Certificates)
I don't use MSBuild to create deployments; I use Mage. However, I use our .pfx file to import our cert into my Trusted Publisher store. In order to do that I have to input the password. After that's done, when I save a manifest in Mage I no longer have to provide a password. I can simply select the cert from my store.
John Robbins has a blog post about how to wrap SignTool.exe in MSBuild, Code Signing – It’s Cheaper and Easier than You Thought.