I have called Entrust and they issue the same as well. The process is to sign the required EXEs of the project before doing the Setup. So, once the Ctrl+Shit+B has been done (three EXEs in our case), we sign all of them. Then, we run the setup. A certificate is good for the duration of the period it has been purchased for, usually one to five years. It is valid for any EXE in the company during that period.