diff --git a/scripts/nightly.yaml b/scripts/nightly.yaml
index b504bfc37..bc9b5782f 100644
--- a/scripts/nightly.yaml
+++ b/scripts/nightly.yaml
@@ -147,28 +147,33 @@ stages:
       inputs:
         command: custom
         arguments: 'pack $(Agent.TempDirectory)\package\out\Microsoft.Z3.x64.sym.nuspec -OutputDirectory $(Build.ArtifactStagingDirectory) -Verbosity detailed -Symbols -SymbolPackageFormat snupkg -BasePath $(Agent.TempDirectory)\package\out' 
-#    - task: PythonScript@0
-#      displayName: 'Python: assemble files'
-#      inputs:
-#        scriptSource: 'filepath'
-#        scriptPath: scripts\mk_nuget_task.py
-#        workingDirectory: $(Agent.TempDirectory)\package
-#        arguments:
-#          $(Agent.TempDirectory)\package
-#          $(ReleaseVersion)
-#          $(Build.Repository.Uri)
-#          $(Build.SourceBranchName)
-#          $(Build.SourceVersion)
-#          $(Build.SourcesDirectory)
-#          nosymbols
-#    - task: NugetCommand@2
-#      displayName: 'NuGet Pack'
-#      inputs:
-#        command: pack
-#        packagesToPack: $(Agent.TempDirectory)\package\out\Microsoft.Z3.x64.nuspec
-#        basePath: $(Agent.TempDirectory)\package\out
-#        packDestination: $(Build.ArtifactStagingDirectory)
-#        verbosityPack: detailed
+    - task: EsrpCodeSigning@1
+      displayName: 'Sign Package'
+      inputs:
+        ConnectedServiceName: 'z3-esrp-signing'
+        FolderPath: $(Build.ArtifactStagingDirectory)
+        Pattern: Microsoft.Z3.x64.$(ReleaseVersion).nupkg
+        signConfigType: 'inlineSignParams'
+        inlineOperation: |
+          [
+            {
+              "KeyCode" : "CP-401405",
+              "OperationCode" : "NuGetSign",
+              "Parameters" : {},
+              "ToolName" : "sign",
+              "ToolVersion" : "1.0"
+            },
+            {
+              "KeyCode" : "CP-401405",
+              "OperationCode" : "NuGetVerify",
+              "Parameters" : {},
+              "ToolName" : "sign",
+              "ToolVersion" : "1.0"
+            }
+          ]
+        SessionTimeout: '60'
+        MaxConcurrency: '50'
+        MaxRetryAttempts: '5'
     - task: PublishPipelineArtifact@1
       inputs:
         targetPath: $(Build.ArtifactStagingDirectory)