SignTool: "No certificates were found that met all the given criteria." when using -buildmachine

I’m trying to set up a build machine for automatic builds. When I use the "-buildmachine’ option with RunUAT BuildGraph, on my project, I get an infinite loop when it gets to the staging. It keeps saying “SignTool Error: No certificates were found that met all the given criteria.”

Anyone know why? What exactly does the -buildmachine option do? I can’t find any reference to it in the documentation, but Unreal’s BuildGraph example uses it.

Here’s what the error looks like, repeated over and over as it tries to sign the .exe file:

The following certificates were considered:
After EKU filter, 0 certs were left.
After expiry filter, 0 certs were left.
After Subject Name filter, 0 certs were left.
After Private Key filter, 0 certs were left.
SignTool Error: No certificates were found that met all the given criteria.
Took 0.0209442s to run SignTool.exe, ExitCode=1
Running: C:\Program Files (x86)\Windows Kits\8.1\bin\x86\SignTool.exe sign /a /n “Epic Games” /t Notice to all StartCom subscribers /debug

just catched the same issue after added “-buildmachine” option
maybe some extended setup is required?

The -buildmachine option enables code signing by default. You can turn it off by adding the -NoCodeSign argument to your command.