A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
Artifact Signing: Suspended 'camaleon-production' certificate profile without clear reason
Problem description
I am encountering an issue where my 'camaleon-production' certificate profile in the Artifact Signing service has been suspended, but no specific reason or explanation is provided. I am seeking clarification on why this suspension occurred and how to resolve it. It appears to be related to a CamaleonPatcher.exe that was flagged as malware and signed with one of our certificates.
Environment
Service: Artifact Signing; Resource type: Trusted Signing account; Region: not specified in the case information.
What I've already tried
I have reviewed the case materials and the portal, but no specific troubleshooting steps or actions have been documented in the case. I have not performed any changes or attempted to resolve the suspension myself.
Current status
I am seeking assistance to understand the cause of the suspension and the steps needed to reinstate the certificate profile. CamaleonPatcher.exe was flagged about a month ago by windows defender as malware, assuming maybe it needed to be signed, i signed it and re-deployed, also submitted the executable for review, which was denied due to malware signature being detected. We have since completely rebuilt that application (and renamed it CamaleonUpdate.exe) and removed many of the security issues microsoft found in it. We no longer distribute that application, even though the application was legitimate. The application updates core files and installs required components for our flagship point-of-sale software, so naturally it requires elevation in windows. The difference now is we've removed insecure http connections, all files downloaded are signed, hashed, and verified at install-time, and all downloads are over a secure https connection. This situation also triggered ISPs from blocking access to our domain, resulting in us having to contact a laundry-list of ISP to request unblocking.