Index: /trunk/Config.kmk
===================================================================
--- /trunk/Config.kmk	(revision 75193)
+++ /trunk/Config.kmk	(revision 75194)
@@ -3621,5 +3621,12 @@
 
   # The above version with complicated requirements is what Xcode 5.0.1GM suggest for kexts.
-  VBOX_SIGN_BUNDLE_FN = $(call MSG_TOOL,SIGNTOOL,,$(1),$(2))$(NLTAB)$(VBOX_CODESIGN) \
+  ifdef VBOX_WITH_CORP_CODE_SIGNING
+   ## @todo cannot handle $(2), the identifier. $(3) is hopefully either empty or --deep
+   VBOX_SIGN_BUNDLE_FN = $(call MSG_TOOL,SIGNTOOL,,$(1),$(2))$(NLTAB) \
+    ditto -c -k $(1) $(1).zip$(NLTAB) \
+    $(call VBOX_CCS_SIGN_CMD,apple,$(1),,$(3))$(NLTAB) \
+	ditto -x -k $(1).zip $(1)
+  else
+   VBOX_SIGN_BUNDLE_FN = $(call MSG_TOOL,SIGNTOOL,,$(1),$(2))$(NLTAB)$(VBOX_CODESIGN) \
 	--verbose=9 \
 	--force \
@@ -3629,4 +3636,5 @@
 	$(VBOX_CERTIFICATE_SUBJECT_NAME_ARGS) \
 	$(1) $(if $(2),--identifier "$(2)",)
+  endif
 
   ## Sign a Mach-O image.