diff --git a/tools/sign.bat b/tools/sign.bat
index 82daaef575f3e8..fae06583b4923f 100644
--- a/tools/sign.bat
+++ b/tools/sign.bat
@@ -3,7 +3,7 @@
 set timeservers=(http://timestamp.globalsign.com/scripts/timestamp.dll http://timestamp.comodoca.com/authenticode http://timestamp.verisign.com/scripts/timestamp.dll http://tsa.starfieldtech.com)
 
 for %%s in %timeservers% do (
-    signtool sign /a /d "Node.js" /du "https://nodejs.org" /t %%s %1
+    signtool sign /a /d "Node.js" /du "https://nodejs.org" /fd SHA256 /t %%s %1
     if not ERRORLEVEL 1 (
         echo Successfully signed %1 using timeserver %%s
         exit /b 0