Sign assemblies with a strong name (.pfx / .snk certificate)

We would like to add assembly signing with a .pfx or .snk certificate to our pipeline. Does Teamcity offer a way to do this?

More specifically, is there a way to put the certificate on the Teamcity server instead of on each build agent?

I've read in other posts that the .pfx certificate needs to be installed on all build agents, but with an increasing number of build agents this is a bit cumbersome. Especially because the certificate has to be installed under the same user the BuildAgent is running under.

.snk certificates do not need to be installed but also have to be available on all agents.

Setup:

Teamcity Professional 2020.2 (85487)

Build Step: Currently Visual Studio (sln) runner, integrating to dotnet with msbuild works fine