I have created a "Trusted Signing Account" in Azure. When I go to the "Validate ID" section, the "New ID" button is disabled. Below that, I see the message "Unable to fetch data." As for permissions, the necessary permissions have been assigned. Code Signing Certificate Profile Signer Code Signing Identity Verifier Below is a screenshot of the actual role assignment. (Please note that I am operating in Japanese, so the display is in Japanese.)

The role you need should be called "Trusted Signing Identity Verifier" (perhaps it's named differently here). That should otherwise be correct though. For me too the "New Identifier" button was disabled, but was enabled after I assignined this role, so I can't see any other issue. Perhaps check just to confirm there isn't a role with exactly this name: "Trusted Signing Identity Verifier"?

Cannot start "Identity Validation" under Trusted Signing Account

Goo 0

I have created a "Trusted Signing Account" in Azure.

When I go to the "Validate ID" section, the "New ID" button is disabled. Below that, I see the message "Unable to fetch data."

As for permissions, the necessary permissions have been assigned.

Code Signing Certificate Profile Signer
Code Signing Identity Verifier

Below is a screenshot of the actual role assignment.

(Please note that I am operating in Japanese, so the display is in Japanese.)

azure_trusted_signing_1

1 answer

Kevin 36 Reputation points

2024-07-22T11:01:50.1133333+00:00

The role you need should be called "Trusted Signing Identity Verifier" (perhaps it's named differently here). That should otherwise be correct though.

For me too the "New Identifier" button was disabled, but was enabled after I assignined this role, so I can't see any other issue.

Perhaps check just to confirm there isn't a role with exactly this name: "Trusted Signing Identity Verifier"?
Please sign in to rate this answer.
Goo 0 Reputation points

2024-07-23T02:38:19.9+00:00

Thank you for your reply!

In my environment, the role "Trusted Signing Identity Verifier" doesn't exist at all.

Instead, I see a role called "Code Signing Identity Verifier".

I'm wondering if the name has changed - is this correct?

Givary-MSFT 32,311 Reputation points Microsoft Employee

2024-07-23T08:05:51.28+00:00

@Goo Adding to the above details, refer to this documentation - https://video2.skills-academy.com/en-us/azure/trusted-signing/quickstart?tabs=registerrp-portal%2Caccount-portal%2Ccertificateprofile-portal%2Cdeleteresources-portal

https://video2.skills-academy.com/en-us/azure/trusted-signing/concept-trusted-signing-resources-roles#:~:text=policy%20files.-,Supported%20roles,-Role%2Dbased%20access

Let me know if this helps, feel free to post back.

Goo 0 Reputation points

2024-07-23T09:41:12.6866667+00:00

Thank you very much!

However, I checked the documentation, but couldn't figure out the cause.

I think I might be overlooking something minor, but I still can't determine which setting is incorrect.

In my environment, the Role name appears as "Code Signing~" instead of "Trusted Signing~". Is this situation different from what's expected?

Or has the name just been changed, and this Role name is correct?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Cannot start "Identity Validation" under Trusted Signing Account

1 answer

Your answer