I use SignTool from the Windows SDK along with a code signing certificate to handle that.

You supply a password to the certificate authority and they supply the cert. When you got to sign you specify the certificate file, your password, and the file you want signed and signtool does the rest.

Hope that helps.