Signing Excel files with macros to allow running while blocking the other unsigned files in my OnPremise File Servers

Question

I need some assistance and guidance in regard to signing bulk Excel Spreadsheets which have custom macros created by the Finance team on my OnPremise File servers.

I have a Wildcard SSL certificate for my domain *.domain.net, so how do I sign it so the Excel files can be opened safely while the other non-approved Excel spreadsheet is blocked from running (eg. Ransomware or other malicious files)?

Do I have to manually sign the Excel Spreadsheet again every time the users update the Excel file content or just when the macro is updated?

The goal here is to allow Excel files with macros that I have signed or approved to run on my File Server share while blocking other Excel files.

Any help would be greatly appreciated.