diff --git a/BUILD b/BUILD
new file mode 100644
index 0000000..bf73fb2
--- /dev/null
+++ b/BUILD
@@ -0,0 +1,29 @@
+################################################################################
+# Copyright 2017 Google Inc.
+#
+# This software is licensed under the terms defined in the Widevine Master
+# License Agreement. For a copy of this agreement, please contact
+# widevine-licensing@google.com.
+################################################################################
+
+# Build provisioning sdk tar package.
+
+load("@bazel_tools//tools/build_defs/pkg:pkg.bzl", "pkg_tar")
+
+pkg_tar(
+    name = "provisioning_sdk_files",
+    strip_prefix = "/",
+    files = [
+        "run_tests.sh",
+        "//example:binary_release_files",
+        "//protos/public:binary_release_files",
+        "//provisioning_sdk/public:binary_release_files",
+        "//provisioning_sdk/public/python:binary_release_files",
+    ],
+)
+
+pkg_tar(
+    name = "provisioning_sdk-bin",
+    deps = [":provisioning_sdk_files"],
+    files = ["//provisioning_sdk/public:libprovisioning_sdk.so"],
+)
diff --git a/common/mock_rsa_key.h b/common/mock_rsa_key.h
index 3fc70e3..a0d7d72 100644
--- a/common/mock_rsa_key.h
+++ b/common/mock_rsa_key.h
@@ -9,6 +9,8 @@
 #ifndef COMMON_MOCK_RSA_KEY_H_
 #define COMMON_MOCK_RSA_KEY_H_
 
+#include <string>
+#include "gmock/gmock.h"
 #include "common/rsa_key.h"
 
 namespace widevine {
diff --git a/example/BUILD b/example/BUILD
index ce70955..6e37862 100644
--- a/example/BUILD
+++ b/example/BUILD
@@ -12,6 +12,15 @@ package(
     default_visibility = ["//visibility:public"],
 )
 
+filegroup(
+    name = "binary_release_files",
+    srcs = [
+        "provisioning_example.cc",
+        ":example_data",
+        ":provisioning_message_generator",
+    ],
+)
+
 filegroup(
     name = "example_data",
     srcs = glob(["example_data/*"]),
diff --git a/protos/public/BUILD b/protos/public/BUILD
index f47d3a0..1e636a9 100644
--- a/protos/public/BUILD
+++ b/protos/public/BUILD
@@ -6,14 +6,23 @@
 # widevine-licensing@google.com.
 ################################################################################
 
-#
-# Description:
-#   Public protocol buffer definitions for Widevine Services.
+# Protocol buffer definitions for Widevine Services.
 
 package(default_visibility = ["//visibility:public"])
 
 load("@protobuf_repo//:protobuf.bzl", "cc_proto_library", "py_proto_library")
 
+# Only a subset of files are included in binary release.
+filegroup(
+    name = "binary_release_files",
+    srcs = [
+        "certificate_provisioning.proto",
+        "client_identification.proto",
+        "provisioned_device_info.proto",
+        "signed_device_certificate.proto",
+    ]
+)
+
 cc_proto_library(
     name = "certificate_provisioning_proto",
     srcs = ["certificate_provisioning.proto"],
diff --git a/provisioning_sdk/public/BUILD b/provisioning_sdk/public/BUILD
index 7c57daa..eecdf3d 100644
--- a/provisioning_sdk/public/BUILD
+++ b/provisioning_sdk/public/BUILD
@@ -18,6 +18,11 @@ package(
 # Note that the shared library should be built with -fvisibility=hidden.
 PUBLIC_COPTS = ["-fvisibility=default"]
 
+filegroup(
+    name = "binary_release_files",
+    srcs = glob(["*.h"]),
+)
+
 cc_binary(
     name = "libprovisioning_sdk.so",
     linkshared = 1,
diff --git a/provisioning_sdk/public/python/BUILD b/provisioning_sdk/public/python/BUILD
index 0db32cf..3c8ef52 100644
--- a/provisioning_sdk/public/python/BUILD
+++ b/provisioning_sdk/public/python/BUILD
@@ -8,6 +8,14 @@
 
 package(default_visibility = ["//visibility:public"])
 
+filegroup(
+    name = "binary_release_files",
+    srcs = glob([
+        "*.py",
+        "*.i",
+    ]),
+)
+
 py_library(
     name = "test_data_utility",
     srcs = ["test_data_utility.py"],