diff --git a/.azure-pipelines/nightly.yml b/.azure-pipelines/nightly.yml
index a1ee16a2..1a53afd8 100644
--- a/.azure-pipelines/nightly.yml
+++ b/.azure-pipelines/nightly.yml
@@ -33,11 +33,7 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: true
-                  signType: real
-                  signWithProd: true
-                  zipSources: false
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                  enabled: false
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -47,6 +43,19 @@ extends:
               - checkout: self
                 clean: true
                 fetchTags: true
+              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
+              - task: NuGetAuthenticate@1
+                displayName: Authenticate MicroBuild feed
+              - task: MicroBuildSigningPlugin@4
+                displayName: Install Signing Plugin 1.1.1306
+                inputs:
+                  signType: real
+                  version: '1.1.1306'
+                  zipSources: false
+                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: NodeTool@0
                 displayName: Use Node 20.x
                 inputs:
diff --git a/.azure-pipelines/rc.yml b/.azure-pipelines/rc.yml
index 59286c81..07da2067 100644
--- a/.azure-pipelines/rc.yml
+++ b/.azure-pipelines/rc.yml
@@ -28,11 +28,7 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: true
-                  signType: real
-                  signWithProd: true
-                  zipSources: false
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                  enabled: false
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -42,6 +38,19 @@ extends:
               - checkout: self
                 clean: true
                 fetchTags: true
+              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
+              - task: NuGetAuthenticate@1
+                displayName: Authenticate MicroBuild feed
+              - task: MicroBuildSigningPlugin@4
+                displayName: Install Signing Plugin 1.1.1306
+                inputs:
+                  signType: real
+                  version: '1.1.1306'
+                  zipSources: false
+                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: NodeTool@0
                 displayName: Use Node 20.x
                 inputs: