Artifact Signing identity validation renewal stuck after “Email verification failed”

Open an Azure Support request to have the conflicting renewal state cleared or otherwise enable a new identity validation using the monitored individual mailbox; further renewal or deletion attempts will not resolve the current service-side conflict.

Submit the support request

1. In the Azure portal, open Help + support and select Create a support request.
2. Choose the affected subscription and an Artifact Signing / identity validation problem type. If offered, select Email Verification or Validation Failed.
3. Include:
   • The full Identity Validation ID.
   • The affected subscription ID and Artifact Signing account name.
   • Current status: Email verification failed.
   • Both subsequent errors:
     • An identity renewal request is already in-progress
     • Revetting operation has already been triggered for this vetting request
   • A request to clear/cancel the stuck renewal or permit a new identity validation request.
   • The fact that the replacement primary address will be a monitored individual mailbox capable of receiving external messages and links.
4. Provide IDs only through the private support case—not in this public Q&A thread.

The Artifact Signing FAQ explicitly directs customers to contact support when another validation is required with a different primary email address. It also lists Azure Support as the assistance channel for identity-validation problems.^1^ The Azure portal support blade is also the documented escalation route in a related identity-validation case.^2^

Why another portal retry is not appropriate

For Email verification failed, the supported recovery is to create another identity validation request; the email address must not be a distribution list and must accept links from external senders. An expired verification link cannot be resent against the same request.^1^

Normally, renewal validation errors also require creating a new identity validation. Deletion is self-service only when the validation is not in the In Progress state.^3^ Your attempted new renewal and deletion have already reached contradictory backend guards, so do not continue retrying them; attach screenshots and timestamps of those errors to the support request.

Do not delete the Artifact Signing account or any linked certificate profiles as a workaround. Deleting an identity validation can stop renewal for linked profiles across Artifact Signing accounts in the subscription, and a deleted validation cannot be recovered.^3^

After support clears the conflict, create the replacement validation in the Azure portal; identity validation cannot be completed through Azure CLI. Ensure the operator has the Artifact Signing Identity Verifier role.^3^

References

1. Artifact Signing FAQ
2. Identity validation request failed. - Microsoft Q&A
3. Renew or delete Artifact Signing Identity Validations