diff --git a/js/forge.config.ts b/js/forge.config.ts
index 813891a..f47e78b 100644
--- a/js/forge.config.ts
+++ b/js/forge.config.ts
@@ -46,6 +46,7 @@ const config: ForgeConfig = {
       // provisions the dlib + metadata file and exports these env vars, so local
       // `yarn make` and unsigned CI builds both work unchanged.
       windowsSign: process.env.AZURE_METADATA_JSON_PATH ? {
+        debug: true,
         signWithParams: [
           '/v',
           '/fd', 'SHA256',