Is it possible to dynamically generate a self extracting executable but only sign it once at the beginning?
<p>My server needs to generate a client whose <code>app.config</code> needs to be altered dynamically during run time, based on information that the user submits. This then needs to be compressed into a single executable (so either all the external <code>dll</code> and resources need to be embedded into the executable or I need to create a self extracting executable). However, I also must sign it with my company's certificate, but I will not have access to the certificate on server run time (aka dynamic client generation time), and only have access to it at client compile time (essentially). Is what I'm asking for even possible to accomplish, and if so are there any pointers to how I could do this? 
I was able to create self extracting executable via <code>7zip</code>, but it brings up security prompts on windows and anti virus programs since it's not signed. </p>

<p>The client is a .net 4.0 winforms app (cannot be changed). </p>