Authenticode signing certificate renewal still needs Windows system in the loop
We built our Windows .exe signing in a way that it can be done on Linux computers. However, getting a new signing cert currently requires still a custom Windows binary run. We should move that part to a Linux system, too.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information