Artifact Signing: Certificate profile stopped issuing certificates — Issue after subscription reactivation

Problem description

I am experiencing an issue where my Trusted Signing public certificate profile in East US stopped issuing certificates following a subscription reactivation on 2026-09-29. The last successful issuance was on 2026-09-30 at 07:27 UTC, and no new certificates have been issued since then. All signing attempts now fail with HTTP 403 errors and an empty response body, with the signing tools indicating 'SignerSign() failed' with error 0x80004005. The identity validation remains completed and valid until 2027-06-30. I am seeking assistance to restore the certificate issuance process.

Environment

Trusted Signing - Preview; A Trusted Signing account in East US; A public certificate profile; Identity validation completed, expires 2027-06-30; Signing performed by a service principal with Trusted Signing Certificate Profile Signer role; Reactivated subscription on 2026-09-29.

What I've already tried

I confirmed that the subscription was reactivated and in Enabled state, billing was current, and identity validation for the Trusted Signing account was completed. I reproduced the failure using both the azure/trusted-signing-action and Trusted Signing PowerShell module, which both resulted in HTTP 403 errors with an empty response body. I verified that the provider registration, profile status, and RBAC roles remained correct as of 2026-10-08. Despite these checks, signing continues to fail, suggesting a possible authorization state mismatch after the subscription reactivation.

Current status

Currently, the last successful issuance was on 2026-09-30, and all subsequent signing attempts have failed with HTTP 403 errors. I am requesting escalation to the Trusted Signing product team to reset the authorization state for my account, as standard checks have not resolved the issue. I need assistance to restore certificate issuance and resume signing operations.