Artifact Signing organization validation: can the business address be a commercial mail (CMRA) or registered agent address?

Microsoft does not publicly document whether a CMRA/virtual mailbox or registered-agent address qualifies as an Artifact Signing organization’s business address, so obtain confirmation through Azure Support before submitting rather than assuming that matching the Florida registry is sufficient.

Address eligibility

For Public Trust organization validation, the portal requires the business address of the legal business entity, and Microsoft recommends keeping the entity’s public records current. The submitted organization name, business identifier, website, email domain, and address are then validated for a publicly trusted certificate.^1^

Neither the published Artifact Signing instructions nor the Microsoft PKI Services CPS explicitly says that any of these are accepted or prohibited:

• A CMRA or virtual mailbox
• A PMB or suite address
• A registered agent’s address

The CPS requires Public Trust identity values to be validated, but the available policy does not establish that an address becomes acceptable merely because it appears as the principal address in a state registry.^2^

Therefore:

• Entering the address exactly as recorded by the Florida Division of Corporations helps avoid a mismatch, but does not guarantee approval.
• Do not characterize a registered agent’s address as the company’s operating address unless that is accurate.
• Before changing the public record solely for validation, open an Azure support request and ask whether the proposed address type is acceptable for Artifact Signing Public Trust organization validation. The Artifact Signing FAQ identifies Azure Support and Microsoft Q&A as the support channels for identity-validation assistance.^3^

Supporting documents

The Artifact Signing documentation does not publish a definitive document checklist for this address scenario. It says that if additional documents are needed:

1. The request changes to Action Required.
2. Instructions are sent by email.
3. The validation team reviews the supplied information and either completes or fails the request.^1^

Consequently, a recent Florida filing showing the legal name and address is relevant evidence, but the documentation does not guarantee that it will be sufficient by itself. The validation team may request further evidence, and the public guidance does not specify whether that would be a utility bill, bank statement, lease, or another record for a CMRA or registered-agent address.

Prepare records that consistently show:

• The LLC’s exact legal name
• The same address and formatting
• The business identifier used in the request
• Control of the company website and email domain
• The applicant’s authority to represent the LLC

The primary email must be monitored, use a domain owned by the legal entity, accept external messages containing links, and complete verification within seven days.^1^

Changing the address and the three-attempt limit

If the address must change after creating the validation, it cannot be edited in place: Microsoft instructs customers to create a new identity-validation request for changes.^1^

The documented three-attempt rule concerns uploading additional documentation after the validation team requests it. A closely matched Artifact Signing answer confirms that an in-progress request can be deleted and recreated, and that the three attempts apply to requested document uploads.^4^

However, Microsoft does not document this as “three fresh validation requests per entity.” The FAQ states that once all three additional-document attempts are exhausted, onboarding cannot proceed. It also says that a non-email-related failure means the validation team could not validate the supplied information; repeatedly creating requests for the same entity while one is in progress does not help.^3^

Recommended sequence:

1. Get written clarification from Azure Support about the proposed CMRA or registered-agent address.
2. Update the Florida record first if proceeding with that address.
3. Wait until the updated public record is available, then submit matching information in Artifact Signing account → Identity validations → Organization → New Identity → Public.
4. If additional documents are requested, respond deliberately; those submissions are the attempts subject to the three-attempt limit.
5. If the address later changes, create a new validation rather than trying to modify the existing one.

References

1. Quickstart: Set up Artifact Signing
2. Microsoft PKI Services Certification Practice Statement (CPS)
3. Artifact Signing FAQ
4. Artifact Signing identity validation stuck on email verification – no resend option / third validation attempt - Microsoft Q&A