A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
Yes. If identity validation is not renewed before expiration, certificate renewal stops and signing processes associated with those certificate profiles stop.
For the current re-validation:
- Check the Identity Validation status in the Azure portal:
- Open the Artifact Signing account.
- Go to Objects or the account overview.
- Select Identity Validation.
- Confirm whether the request is still In Progress, Action Required, Completed, or Expired.
- If the request is still In Progress after more than 10 days:
- The documented processing time is 1 to 20 business days and can take longer if more documentation is needed.
- Identity validation requests can’t be expedited.
- For assistance, use Azure Support or Microsoft Q&A with the artifact-signing tag.
- If the identity validation is already Expired or the Renew action shows validation errors:
- Create a new Identity Validation in the Azure portal.
- Renewal and identity validation can only be completed in the Azure portal, not with Azure CLI.
- After renewal completes:
- The status changes to Completed.
- Within 24 hours, the new certificate is rotated.
- If the new identity validation ID does not appear, go to Certificate Profiles.
- Delete the existing certificate profile associated with the expiring identity validation, then create a new certificate profile with the same name and select the renewed identity validation.
- Risk: recreating the certificate profile changes the EKU associated with that profile.
- If more documents are requested:
- Upload them in the Azure portal.
- There are three attempts for documentation upload.
References: