diff --git a/.github/workflows/_tauri.yml b/.github/workflows/_tauri.yml
index 17753be7f..011a08ad3 100644
--- a/.github/workflows/_tauri.yml
+++ b/.github/workflows/_tauri.yml
@@ -64,7 +64,8 @@ jobs:
       - name: Install AzureSignTool
         if: ${{ runner.os == 'Windows' }}
         shell: bash
-        run: dotnet tool install --global AzureSignTool
+        # AzureSignTool >= 5 needs .NET 8. windows-2019 runner only has .NET 7.
+        run: dotnet tool install --global AzureSignTool --version 4.0.1
       - name: Build release exe and MSI
         # Signs the exe before bundling it into the MSI
         run: pnpm build