This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 1%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBM%3C/text%3E%3C/svg%3E)
I've got a strange issue I'm struggling to understand. I've been using Artifact Signing successfully for about a month. I have one certificate profile. For about the first month, that certificate profile made a new certificate every day. I assumed this was because Artifact Signing uses short term certificates. That was all good and my signing operations via Azure DevOps were working fine. Sometime last week, for reasons I don't understand, that just stopped. New certificates were no longer generated daily on the profile. 3 days after that happened, I was no longer able to sign anything, I assume because the last certificate expired. I got weird 403 errors that took a long time to understand.
In frustration, I deleted the certificate profile and re-created it. A new certificate was created. I could sign again. Its now 3 days later and that certificate is about to expire. A new one has not been created.
Where did I go wrong here? My understanding was that the whole short term certificate thing was fully automated, and it was for about a month. Now that no longer seems to be the case?
A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 81%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMR%3C/text%3E%3C/svg%3E)
Hey Brady, I am having the same exact issue. I think there must be a bug with the certificate auto-creation. I had a certificate profile that was auto-renewing for about a week and then just suddenly stopped. My github action workflows just kept failing with 403 errors. I looked in and found that despite my certificate profile being labeled "active" it expired several days ago. I was also under the impression that they auto-renewed so I thought it might have been some fluke initially. I delete the certificate profile and then re-created it, which worked for a few days until it expired today. I guess it is a workaround to delete and recreate the certificate profile, but that seems a hassle every time I want my application signed. Hopefully they get this fixed soon!
Edit:
Here is the location in the docs where they specify they are automatically removed: https://dotnet.territoriali.olinfo.it/en-us/azure/artifact-signing/concept-certificate-management
To help reduce the impact of signing misuse and abuse, Artifact Signing certificates are renewed daily and are valid for only 72 hours. In these short-lived certificates, revocation actions can be as acute as a single day or as broad as needed to cover any incidents of misuse and abuse.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 52%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
@McKay Reed Moore please create a separate Q&A post for your question and
please share the Artifact Signing account name and the corresponding cert profile name in Private message
Hey @Meha-MSFT !
I ended up recreating the certificate profile on 4/1 and just got a renewal yesterday, so I believe the problem is solved. I'll keep an eye on things and if I begin to have the same issue I'll post a question on the forum. Thanks!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 36%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
I have the same issue. I recreated the certificate profile and it seems to be working again for now. Prior to this it automatically renewed certificates consistently for the past two years.
This should be working for you both.
I'm having the same issue. It stopped on April 3rd.