This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 8%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Hi,
I've been playing this game for weeks and now using Azure is reallllly hurting getting my startup launched. I'm trying to get signing certificate to make our new app installable on windows by alpha users but I'm stuck in this ridiculous process that they've created for validating identities for the new Azure Trusted Signing service. I'm paying for the subscription, and eventually they accepted my articles of incorporation of my LLC (with over 3 years of tax records) but refuse to accept my domain purchase invoice.
Had a long chat with my registrar and after a few hours of begging for anything other than a domain purchase reciept that will validate my ownership, I walked away with nothing. Now when I try to submit any different documentation that can validate my company, they just now auto-fail any new identity validation requests.
Why is this process so painfully broken and how can I move past this? I'm really starting to regret trying to get a signing cert this way and could really use some help. Feel stuck... :(
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Jeff Borden Apologies you have to go through this process, help me with the validation id/org details so that i can check with my team on the above mentioned issue.
@Givary-MSFT Thank you so much for the response!!! I'm so happy that there are humans to help, I've been feeling very hopeless.
Below are a few of my failed attempts validation ids:
e49f3af9-52d5-41c7-88ba-4782563b9ea3
aa294090-c760-47ff-82de-e1e8ddcb21ae
03aab812-d2bb-45f5-b738-6769fadbc45a
I unfortunately don't have an org id immediately handy.
I'm assuming the repeated rejections of my domain purchase invoice are because it's in my personal name and not the LLC on the invoice? If correct, I hoped this wouldn't be an issue as it's a single member LLC and all of the addresses & names do match up. Regardless, I don't know this is the reason for the rejections, as there is a sizable gap in communication when a rejection event occurs. Maybe you can let whoever is processing these requests provide a rejection reason so the end user can take corrective actions?
I realize this service is in preview and I do not mean to be critical - it's just been a long and frustrating process. Thank you for your help.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 91%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
This was the issue I had. I changed my company name to without an ", LLC" and they gave me another chance for submitting more documentation. I also changed my address so instead of showing address name, they show street name without additional stuff.
@Arthur L do you mind sharing the types of documents you submitted successfully? Trying to figure out a route other than domain purchase invoices. Thanks.
Lol I’m stuck with you too. I made a mistake and didn’t do this. I don’t know what result is yet with my status. I pray for it to not fail . Lol I recommend for the domain invoices or registry confirmation records for you to attach an assignment letter on company letterhead showing the relationship between the company and the purchaser. That is what Meha said. Like put this pdf with the domain invoice or submit the pdf if you have a chance when they ask you for an assignment letter.
I am unsure though. I wish there was someone I could call for this because with Q&A, you might not always get a response from an employee, so there’s uncertainty.
Hi @Givary-MSFT
Can you give an opinion on how I can best proceed successfully? I'd like to move forward with my waiting users ASAP. Many thanks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Hi @Jeff Borden , we are validating this with a colleague from the Azure Trusted Signing team.
@Meha-MSFT thank you for your response and for the information about the validation ruleset. Are the complete rules for each document type posted anywhere?
My registar includes "Privacy Protection", so whois doesn't work. During my "Identity Validation" processes, I submitted domain purchase receipts for 3 different domains of mine, trying to understand and get through the requirement - they all were rejected. To be fair, my domain purchase receipts didn't include an expiration date, but I don't recall that being a posted requirement during the validation process.
Based upon your above rules, this is the analysis for each of the domains that were rejected by the Identity Validation process:
So given your rules, 2 of the 3 domains I submitted, actually pass. Am I supposed to modify the purchase receipt on future "Identity Validation" submissions, by writing in the expiration date? That doesn't feel authentic. Or does this process only support the percentage of DNS registars that print expriation dates on their purchase receipts?
Ultimately, how do I move past this roadblock? Digicert? I'm sure you understand that I need to cancel my subscription soon if I'm only paying to be in a broken process.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 52%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
@Jeff Borden Thank you for the details, I am waiting on the validation team to hear more.
The requirements are listed in here: https://video2.skills-academy.com/en-us/azure/trusted-signing/quickstart?tabs=registerrp-portal%2Caccount-portal%2Ccertificateprofile-portal%2Cdeleteresources-portal#important-information-for-public-identity-validation under More documentation section.
Hi @Meha-MSFT
It has been almost a week since your last update. Does it really take a week to get a response? Don't you have MS Teams? Do i just need to give up at this point?
@Meha-MSFT it has been almost a week since your update. How does getting a simple answer move so slowly? Do you guys not have MS Teams? Do I just need to give up at this point?
@Jeff Borden The validation team mentioned they do need the expiration date on the invoice.
That is a very limited response. Will it be accepted if I manually inject it into the domain purchase invoice? Or do you only support the domain registars that put it on there by default? If so, do you have a list of these registrars available? I NEED DETAILS FOR THIS TO BE COMPLETED SUCCESSFULLY!
Once you provide clarity on the above, can you get my account reset where I'm allowed to resubmit identity validation requests without getting auto-rejected?
duped
@Jeff Borden Correct, the expiration date has to come from the domain registrar. Our team does not have a list, however, I was told most registrars do provide the expiration date on it. Did you try uploading a whoIs lookup, if it's possible for you get that. On the account being reset there's no block on your account at the moment. You can very well create another request.
@Meha-MSFT This was my comment over a week ago:
My registar includes "Privacy Protection", so whois doesn't work.
At this point it appears this process doesn't work for us. That would have been amazing to know before wasting over a month on it. I'm all for beta early release features, but this doesn't seem like a serious process or product you are offering - as no one seems intent on making it work. I'd love to have a chat with your product manager but we know that isn't happening. I'm very disappointed in trying Azure for my startup. If it felt like someone was trying to improve the process I'd stay bought in, but I don't feel that so I'm killing my subscription and am bailing on this broken process.
I have been stuck in this process forever - and it keeps getting worse. I just submitted a new identity validation:
id: d756d79d-af83-4a3d-9088-58d77f1e65a0
and it was rejected without allowing me to provide documentation to support it. Why the auto rejection? it wasn't rejected due to a mismatch in DUNS.
So why was it rejected?
How do I move past this???
Why am I getting auto rejected for my very valid business. What is the problem? I don't have weeks to wait in between answers on a support thread. Maybe if the answers were productive, then I could wait - but they are not productive responses.
The continued response is to provide a whois lookup when I've already stated the registrar has privacy protection on the domain. I'm also told that my requests aren't being auto-rejected, but how do you explain the rejection for Identity validation id: d756d79d-af83-4a3d-9088-58d77f1e65a0
I asked on the thread:
can you get my account reset where I'm allowed to resubmit identity validation requests without getting auto-rejected?
and the response was:
On the account being reset there's no block on your account at the moment. You can very well create another request.
So what did I do wrong?
I was also told my domain purchase receipt needed an expiration date on it, and when i submitted just that, I got rejected again. Please for the love of God just be explicit and tell me what the issue is, instead of leaving me guessing and waiting forever.
I just need this to work. I'm throwing myself at your mercy. This is really hurting me. Please please please just help me move this forward. That's all I ask.
Change your company name on request to have no “,LLC” and maybe change street in request to just have street name and nothing else without numbers just e.g Cool Street. Same problem happened for me. I finally got it approved tho
I think you can still keep your Whois info the same but use company address for who is info (full address) and use your company name without the ,LLC. Then also put the company name into your personal name that appears in the who is too. If your name is Cool Guy, then change it to Good Company for who is.
@Jeff Borden Got a response from the validation team: you can share WhoIs lookup, or purchase receipt for the domain, with a purchase, renewal date not older than 12 months from the current date and not expiring in less than 60 days.
@Meha-MSFT Thank you for your response. I'm curious, are these rules, and the rules for the other document types available somewhere?
Unfortunately my domain registration included "Privacy Protection" so my whois is obfuscated and won't work in this case. When I was allowed to submit "Identity Validation" requests, I tried submitting the purchase receipts for 3 of my different domains - and they were all rejected.
None of my domain purchase receipts included an expiration date however. I do not know if you are capturing the expiration date systematically for your analysis. Nor do I recall seeing that an expiration date was a posted requirement or a requested document type during the validation process.
Below is the analysis of the domain purchase receipts I submitted and their corresponding expiration, based upon the above ruleset you just shared:
*Obviously you'll have to replace <XXXX> my the domains I submitted for review in your database.
So if 2 of my 3 domains pass your criteria, why did they fail? What did I do wrong? More importantly, how do I move past this roadblock? Digicert?
Ultimately, if I'm unable to submit whois and domain purchase reciepts, do I have other document types that I can submit or is there no other way for recourse? Additionally, I'm going to need to cancel my subscription soon if I'm just paying to be stuck in a broken process.
Many thanks.
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more