A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
Artifact Signing suspensions are triggered when a certificate is misused or abused according to the service Terms of Use. When misuse or abuse is confirmed, Artifact Signing may revoke certificate(s) and suspend access to the Artifact Signing service. In that case, the service engages directly to handle the issue following CA/Browser Forum CSBR guidelines.
The documentation does not expose detailed suspension reasons or error codes in the Identity Validation blade itself, and there is no self-service way described to see a root cause or lift a suspension. The supported path is to work with Microsoft directly when an account is suspended or certificates are revoked.
If identity validation itself fails (not suspension), typical causes include:
- Missed or expired email verification link for Organization identity validation.
- Inability of the Microsoft validation team to verify the information or documents provided, even after additional documentation.
- Exhausting all three attempts when additional documents are requested.
In those identity-validation-failure scenarios, the guidance is to either create a new identity validation request (for missed/expired email) or, if validation cannot be completed, delete the Artifact Signing account so billing for unused resources stops.
For a suspended Artifact Signing account, the only documented remediation is direct engagement with Microsoft as part of the misuse/abuse handling process.
References: