Authenticode Signing

I'm losing customers hand over fist because people with SP2 are freaking out at the non-signed exes that NSIS is outputting. I've purchased a cert from thawte but I can't find a single post about authenticode. Does NSIS not support it? How do I sign my EXEs?

Look at



and



signcode.exe should do what you want.

Edit: It is available in the .NET SDK as well apparently.