diff --git a/F4SDM42WebApi/M42SandboxedExtension.targets b/F4SDM42WebApi/M42SandboxedExtension.targets
index ba30c01..4bc1edd 100644
--- a/F4SDM42WebApi/M42SandboxedExtension.targets
+++ b/F4SDM42WebApi/M42SandboxedExtension.targets
@@ -97,8 +97,12 @@
     <Message Importance="High"
              Text="Signing Matrix42 package assemblies with $(M42SignTool)." />
 
+    <PropertyGroup>
+      <_M42AssembliesToSignArgs>@(_M42AssembliesToSign->'&quot;%(FullPath)&quot;', ' ')</_M42AssembliesToSignArgs>
+    </PropertyGroup>
+
     <Exec Condition="'@(_M42AssembliesToSign)' != ''"
-          Command="&quot;$(M42SignTool)&quot; sign $(_M42SignCertificateArgs) /tr &quot;$(M42SignTimestampUrl)&quot; /td SHA256 /fd SHA256 /d &quot;$(M42SignDescription)&quot; &quot;%(_M42AssembliesToSign.FullPath)&quot;" />
+          Command="&quot;$(M42SignTool)&quot; sign $(_M42SignCertificateArgs) /tr &quot;$(M42SignTimestampUrl)&quot; /td SHA256 /fd SHA256 /d &quot;$(M42SignDescription)&quot; $(_M42AssembliesToSignArgs)" />
   </Target>
 
   <Target Name="M42_BuildPackage"
diff --git a/docs/matrix42-26-1-extension-migration.md b/docs/matrix42-26-1-extension-migration.md
index 0e771ea..8f9a44f 100644
--- a/docs/matrix42-26-1-extension-migration.md
+++ b/docs/matrix42-26-1-extension-migration.md
@@ -77,6 +77,9 @@ Visual Studio:
 - `Release`: Release ohne Signierung.
 - `Release_signed`: Release mit Signierung.
 
+Bei `Release_signed` werden alle Paket-DLLs in einem einzigen `signtool sign`-Aufruf signiert.
+Das vermeidet eine separate Passwortabfrage pro DLL, wenn das Zertifikat interaktiv entsperrt werden muss.
+
 Signierbare MSBuild-Properties:
 
 ```powershell