diff --git a/build/build.yml b/build/build.yml
index 1da17150..a2e82192 100644
--- a/build/build.yml
+++ b/build/build.yml
@@ -143,23 +143,8 @@ jobs:
       - task: TSAUpload@2
         displayName: Upload logs to TSA
         inputs:
-          tsaVersion: TsaV2
-          codebase: NewOrUpdate
-          codeBaseName: vscode-arduino
-          notificationAlias: embeddeddev@microsoft.com
-          instanceUrlForTsaV2: DEVDIV
-          projectNameDEVDIV: DevDiv
-          areaPath: DevDiv\Cpp Developer Experience\Cross Platform\Embedded
-          iterationPath: DevDiv
-          # To avoid spurious warnings about missing logs, explicitly declare what we don't upload.
-          uploadAPIScan: false
-          uploadBinSkim: false
-          uploadFortifySCA: false
-          uploadFxCop: false
-          uploadModernCop: false
-          uploadPREfast: false
-          uploadRoslyn: false
-          uploadTSLint: false
+          GdnPublishTsaOnboard: true
+          GdnPublishTsaConfigFile: $(Build.SourcesDirectory)\build\tsa.gdntsa
         # Don't open bugs for PR builds
         condition: ne(variables['Build.Reason'], 'PullRequest')
 
diff --git a/build/prerelease.yml b/build/prerelease.yml
index 1b5d08b7..2cfb3896 100644
--- a/build/prerelease.yml
+++ b/build/prerelease.yml
@@ -15,8 +15,7 @@ schedules:
         - main
 
 variables:
-  # TODO: change this to real sign after getting signing approval.
-  SignType: test
+  SignType: real
 
 jobs:
   - template: ./build.yml
diff --git a/build/tsa.gdntsa b/build/tsa.gdntsa
new file mode 100644
index 00000000..5b22390f
--- /dev/null
+++ b/build/tsa.gdntsa
@@ -0,0 +1,9 @@
+{
+    "codebaseName": "vscode-arduino",
+    "notificationAliases": ["embeddeddev@microsoft.com"],
+    "instanceUrl": "https://devdiv.visualstudio.com",
+    "projectName": "DevDiv",
+    "areaPath": "DevDiv\\Cpp Developer Experience\\Cross Platform\\Embedded",
+    "iterationPath": "DevDiv",
+    "allTools": true
+}
\ No newline at end of file