diff --git a/.vsts-ci.yml b/.vsts-ci.yml
index 08294b2a..ec375e8b 100644
--- a/.vsts-ci.yml
+++ b/.vsts-ci.yml
@@ -130,20 +130,16 @@ extends:
               matrix:
                 ARM64:
                   _RID: osx-arm64
-                  _BuildConfig: Release
-                  _SignType: real
                   _DotNetPublishToBlobFeed: false
                 X64:
                   _RID: osx-x64
-                  _BuildConfig: Release
-                  _SignType: real
                   _DotNetPublishToBlobFeed: false
             steps:
             - checkout: self
               clean: true
             - script: eng/common/cibuild.sh
-                -sign 
-                --configuration $(_BuildConfig)
+                --sign
+                --configuration Release
                 --prepareMachine
                 -p:RID=$(_RID) -p:DotNetSignType=real -p:TeamName=$(TeamName) -p:OfficialBuildId=$(Build.BuildNumber)
               displayName: Build
@@ -162,5 +158,4 @@ extends:
                 PathtoPublish: '$(Build.ArtifactStagingDirectory)'
                 ArtifactName: 'drop-$(_RID)'
                 publishLocation: 'Container'
-                parallel: true
-
+                parallel: true
\ No newline at end of file
diff --git a/src/redist/redist.csproj b/src/redist/redist.csproj
index 1031db7b..759ab143 100644
--- a/src/redist/redist.csproj
+++ b/src/redist/redist.csproj
@@ -9,7 +9,7 @@
 
   <ItemGroup>
     <ProjectReference Include="..\dotnet-core-uninstall\dotnet-core-uninstall.csproj" />
-    <PackageReference Include="Microsoft.DotNet.Build.Tasks.Installers" Version="10.0.0-beta.25124.4"/>
+    <PackageReference Include="Microsoft.DotNet.Build.Tasks.Installers" Version="10.0.0-beta.25124.4" Condition="'$(RID)' == 'win-x86'"/>
   </ItemGroup>
 
   <Import Condition="'$(RID)' == 'win-x86'" Project="targets\Versions.targets" />
@@ -19,4 +19,8 @@
   <Import Condition="'$(RID)' == 'win-x86'" Project="targets\FileExtensions.targets" />
   <Import Condition="'$(RID)' == 'win-x86'" Project="targets\GenerateMSIs.targets" />
   <Target Condition="'$(RID)' == 'win-x86'" Name="GenerateMSIs" AfterTargets="Build" DependsOnTargets="GenerateLayout;GenerateDotnetCoreUninstallMsi" />
+
+  <!-- Entitlements are needed but not automatically added for macOS. See https://github.com/dotnet/runtime/issues/113707 -->
+  <Import Condition="'$(RID)' == 'osx-x64' OR '$(RID)' == 'osx-arm64'" Project="targets\MacEntitlements\AddMacEntitlements.targets" />
+  
 </Project>
\ No newline at end of file
diff --git a/src/redist/targets/MacEntitlements/AddMacEntitlements.targets b/src/redist/targets/MacEntitlements/AddMacEntitlements.targets
new file mode 100644
index 00000000..cbab9a62
--- /dev/null
+++ b/src/redist/targets/MacEntitlements/AddMacEntitlements.targets
@@ -0,0 +1,7 @@
+<Project>
+    <!-- Entitlements are needed but not automatically added for macOS. See https://github.com/dotnet/runtime/issues/113707 -->
+    <!-- This generates an ad-hoc signature that will later be resigned, but keeps the entitlements. -->
+    <Target Name="AddMacEntitlements" AfterTargets="GenerateLayout">
+        <Exec Command="codesign -s - -f --entitlements $(MSBuildThisFileDirectory)entitlements.plist $(ArtifactsDir)layout/dotnet-core-uninstall/dotnet-core-uninstall" />
+    </Target>
+</Project>
\ No newline at end of file
diff --git a/src/redist/targets/MacEntitlements/entitlements.plist b/src/redist/targets/MacEntitlements/entitlements.plist
new file mode 100644
index 00000000..2b7e8d11
--- /dev/null
+++ b/src/redist/targets/MacEntitlements/entitlements.plist
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-jit</key>
+      <true/>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+      <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+      <true/>
+    <key>com.apple.security.cs.debugger</key>
+      <true/>
+    <key>com.apple.security.get-task-allow</key>
+      <true/>
+  </dict>
+</plist>
\ No newline at end of file