You need to sign it. If you are shipping this application to the end-users, you need to obtain a certificate from Verisign, Geotrust or via MobileToMarket program
Also see this and this
Another good source is this page - Application code Signing for ISVs