You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/artifact-signing/faq.yml
+18-15Lines changed: 18 additions & 15 deletions
Original file line number
Diff line number
Diff line change
@@ -34,19 +34,22 @@ sections:
34
34
To register the Microsoft.CodeSigning app, go to the subscription **Resource providers** pane as shown in this example:
35
35
36
36
:::image type="content" source="media/artifact-signing-resource-provider.png" alt-text="Screenshot of registering the Microsoft.CodeSigning resource provider." lightbox="media/artifact-signing-resource-provider.png":::
37
+
- question: What if I'm unable to register Microsoft.CodeSigning as a resource provider?
38
+
answer: |
39
+
The Microsoft.CodeSigning resource provider isn't supported on Free or Trial Azure subscriptions.. A paid Azure subscription is required to register the provider.
37
40
- question: What is the cost of using Artifact Signing?
38
41
answer: |
39
42
- For pricing information, see [Artifact Signing pricing](https://azure.microsoft.com/pricing/details/artifact-signing/).
40
43
- question: What are my support options when I set up Artifact Signing?
41
44
answer: |
42
-
- You can create a support ticket in the Azure portal to get Azure support. Also, you can post a question or search for related questions on Microsoft Q&A (use the tag **artifact-signing**) or [Stack Overflow](https://stackoverflow.com/questions/tagged/trusted-signing) (use the tag **trusted-signing**).
45
+
- You can create a support ticket in the Azure portal to get Azure support. Also, you can post a question or search for related questions on Microsoft Q&A (use the tag **Artifact Signing**) or [Stack Overflow](https://stackoverflow.com/questions/tagged/trusted-signing) (use the tag **trusted-signing**).
43
46
- name: Identity validation
44
47
questions:
45
48
- question: What if I need to create another identity validation for the same organization with a different primary email address?
46
49
answer: For cases where identity validation exists with a primary email address and another identity valiadation request is required, contact support to continue onboarding.
47
-
- question: What if my country/region is not listed in country/region drop down on the Identity Validation page?
50
+
- question: What if my country/region isn't listed in country/region drop down on the Identity Validation page?
48
51
answer: |
49
-
- For Public Trust certificates, Artifact Signing is currently available to organizations in the USA, Canada, the European Union, and the United Kingdom, as well as individual developers in the USA and Canada. This limitation is not applicable to Private Trust certificates.
52
+
- For Public Trust certificates, Artifact Signing is currently available to organizations in the USA, Canada, the European Union, and the United Kingdom, as well as individual developers in the USA and Canada. This limitation isn't applicable to Private Trust certificates.
50
53
- question: What if my Artifact Signing subject name is different from the name in my certificate and my MSIX package name is different now?
51
54
answer: |
52
55
- For Windows app MSIX packages, follow the guidance in [MSIX persistent identity](/windows/msix/package/persistent-identity).
@@ -63,17 +66,17 @@ sections:
63
66
answer: |
64
67
- Ensure that you didn't miss an email verification link that was sent to the primary email address you entered when you created your identity validation request. The link expires after seven days. If you overlooked the email or if you didn't select the link in the email within seven days, create a new identity validation request.
65
68
- If identity validation fails, but not because of a missed email verification, the Microsoft validation team wasn't able to make a determination about your request based on the information that you provided. Even if you provide more documentation when we request it, if we can't validate the information, we can't onboard you to Artifact Signing. In this scenario, we recommend that you delete your Artifact Signing account so that you aren't billed for unused resources.
66
-
- In cases where additional documents were required, you've exhausted all 3 attempts. Therefore, we cannot proceed further with the onboarding.
69
+
- In cases where additional documents were required, you've exhausted all 3 attempts. Therefore, we can't proceed further with the onboarding.
67
70
- question: What if I need assistance with identity validation?
68
71
answer: |
69
72
- For questions about identity validation in Artifact Signing, contact us via Azure Support or by using Microsoft Q&A (use the tag **artifact-signing**).
70
-
- Note: creating additional identity validation requests for the same entity that is in progress does not help. Identity Validation requests cannot be expedited.
73
+
- Note: creating additional identity validation requests for the same entity that is in progress doesn't help. Identity Validation requests can't be expedited.
71
74
- question: What if email validation link has expired?
72
75
answer: |
73
-
- If you missed to click on the email verification within 7 days, you need to start a new identity validation request. A new link cannot be resent on the same request.
76
+
- If you missed to click on the email verification within 7 days, you need to start a new identity validation request. A new link can't be resent on the same request.
74
77
- question: What if email validation says "Failed" and you think you never received the email validation link?
75
78
answer: |
76
-
- Create another identity validation request. Ensure that the email address used is not a distribution list and the email address can receive links from external email addresses.
79
+
- Create another identity validation request. Ensure that the email address used isn't a distribution list and the email address can receive links from external email addresses.
77
80
- question: Where can I find Identity Validation Id?
78
81
answer: |
79
82
- On Identity Validation page, click on the Identity Validation you intend to use. The Identity Validation Id will be shown as "Id" in the details pane that opens.
@@ -84,9 +87,9 @@ sections:
84
87
- question: For Individual identity validation, what if I don’t have an address on a bank statement or utility bill?
85
88
answer: |
86
89
- Be sure to use a government-issued ID with an address on it, to successfully go through the process.
87
-
- question: For Individual identity validation, I see an error - "You do not have permission to access this page".
90
+
- question: For Individual identity validation, I see an error - "You don't have permission to access this page".
88
91
answer: |
89
-
- If you see the error, it is because the email address entered in the individual identity validation request is different from the one being used to sign in to access the identity validation link. Make sure both the email addresses match.
92
+
- If you see the error, it's because the email address entered in the individual identity validation request is different from the one being used to sign in to access the identity validation link. Make sure both the email addresses match.
90
93
:::image type="content" source="media/artifact-signing-indie-validation-email-mismatch.png" alt-text="Screenshot of email mismatch when access link to verify individual developer." lightbox="media/artifact-signing-indie-validation-email-mismatch.png":::
91
94
- name: Certificate profiles
92
95
questions:
@@ -95,7 +98,7 @@ sections:
95
98
- For Windows app MSIX packages, follow the guidance in [MSIX persistent identity](/windows/msix/package/persistent-identity).
96
99
- question: Does deleting a certificate profile revoke the certificates?
97
100
answer: |
98
-
- Deleting a certificate profile does not revoke any previously issued certificates or invalidate their signatures; they remain valid.
101
+
- Deleting a certificate profile doesn't revoke any previously issued certificates or invalidate their signatures; they remain valid.
99
102
- question: Can I add OU field to Public Trust or Public Trust Test or VBS enclave certificate profile?
100
103
answer: |
101
104
- No. OU is only available for Private Trust and Private Trust CI Policy certificates.
@@ -161,7 +164,7 @@ sections:
161
164
Currently, Artifact Signing resources can't be migrated across subscriptions or tenants or resource groups or resources. If you want to make any change to your tenant ID or subscription ID, you must create all your Artifact Signing resources again.
162
165
- question: Does Artifact Signing issue EV certificates?
163
166
answer: |
164
-
No, Artifact Signing doesn't issue Extended Validation (EV) certificates. There is no plan to issue EV certificates in the future.
167
+
No, Artifact Signing doesn't issue Extended Validation (EV) certificates. There's no plan to issue EV certificates in the future.
165
168
- question: Why does SignTool keep looping when it signs MSIX packages?
166
169
answer: |
167
170
Looping multiple times is expected in MSIX signing because each application file and manifest file inside the package is signed.
@@ -178,7 +181,7 @@ sections:
178
181
| Error code (-2147024885/0x8007000b) | For MSIX signing, this error indicates that the publisher in the manifest file doesn't match the certificate subject. Check the publisher that's listed in the manifest file. |
179
182
| Error code (-2147467259/0x80004005) | If you use Service Principal + certificate based authentication, check your Environment Variables listed under the table for ["Service principal with certificate"](https://learn.microsoft.com/dotnet/api/azure.identity.environmentcredential?view=azure-dotnet).|
180
183
| No error codes, SignTool silently fails | Ensure that the relevant .NET runtime version is installed. |
181
-
| `Azure.Identity.CredentialUnavailableException` | You might see this error in [environments outside Azure](https://github.com/Azure/azure-sdk-for-net/issues/29471). If you are working outside of Azure, we recommend that you add "exclude ManagedIdentity" to your manifest file. |
184
+
| `Azure.Identity.CredentialUnavailableException` | You might see this error in [environments outside Azure](https://github.com/Azure/azure-sdk-for-net/issues/29471). If you're working outside of Azure, we recommend that you add "exclude ManagedIdentity" to your manifest file. |
182
185
| 403 | - Check the status of your Azure subscription should be "Registered". <br> - Check the identity trying to sign the file has Artifact Signing Certificate Profile Signer role. <br> - Check the Artifact Signing account name and the Artifact Signing certificate profile name in your *metadata.json* file. <br> - Check the dlib and dlib path. <br> - Install C++ Redistributables from https://docs.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170. <br> - Check your .NET version, dlib version, and Windows SDK version. <br> - Check if the corresponding identity validation has a status of **Completed**.<br> - Check the status of the Certificate Profile must be active. <br> - Verify whether you access the Artifact Signing endpoint from this virtual machine or computer. Try executing the action on a different virtual machine or computer. The error might indicate a network issue. <br> - For Private Trust scenarios 403: The user object ID that does the signing is different from the user object ID that calls `Get-azCodeSigningRootCert`. The appropriate object ID must have the role Artifact Signing Certificate Profile Signer.|
183
186
- name: Cost management and billing
184
187
questions:
@@ -187,9 +190,9 @@ sections:
187
190
To review cost information, in the Azure portal, go to your subscription overview. On the left menu, select **Cost Management**. For more information, see [Cost Management](https://learn.microsoft.com/azure/cost-management-billing/costs/).
188
191
189
192
To review billing information, go to your subscription overview. On the left menu, select **Billing**. For more information, see [Billing](https://learn.microsoft.com/azure/cost-management-billing/manage/).
190
-
- question: Is the pricing pro-rated or it is full amount regardless of when you begin to use the service?
193
+
- question: Is the pricing pro-rated or it's full amount regardless of when you begin to use the service?
191
194
answer: |
192
-
The pricing is not calculated on a pro rata basis. The invoice is generated with the full amount for the SKU that you selected when you created the account, regardless of when you begin to use the service after you create your account.
195
+
The pricing isn't calculated on a pro rata basis. The invoice is generated with the full amount for the SKU that you selected when you created the account, regardless of when you begin to use the service after you create your account.
193
196
- question: What does the signing quota include?
194
197
answer: |
195
198
The signing quota encompasses all signing activities across any certificate profile within an Artifact Signing account.
@@ -208,4 +211,4 @@ sections:
208
211
Please reach out here: https://www.microsoft.com/en-us/wdsi/filesubmission.
209
212
- question: What happens when misuse and abuse of Artifact Signing certificate is confirmed?
210
213
answer: |
211
-
Artifact Signing may revoke certificate(s) and suspend access to Artifact Signing service if misuse or abuse is confirmed.
214
+
Artifact Signing may revoke certificate(s) and suspend access to Artifact Signing service if misuse or abuse is confirmed.
Copy file name to clipboardExpand all lines: articles/artifact-signing/how-to-signing-integrations.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -223,7 +223,7 @@ You can also use the following tools or platforms to set up signing integrations
223
223
224
224
-**GitHub Actions**: To learn how to use a GitHub action for Artifact Signing, see [Artifact Signing - Actions](https://github.com/azure/artifact-signing-action) in GitHub Marketplace. Complete the instructions to set up and use a GitHub action.
225
225
226
-
-**Azure DevOps task**: To use the Artifact Signing Azure DevOps task, see [Artifact Signing](https://marketplace.visualstudio.com/items?itemName=VisualStudioClient.TrustedSigning&ssr=false#overview) in Visual Studio Marketplace. Complete the instructions for setup.
226
+
-**Azure DevOps task**: To use the Artifact Signing Azure DevOps task, see [Artifact Signing](https://marketplace.visualstudio.com/items?itemName=VisualStudioClient.ArtifactSigning) in Visual Studio Marketplace. Complete the instructions for setup.
227
227
228
228
-**PowerShell for Authenticode**: To use PowerShell for Artifact Signing, see [Artifact Signing](https://www.powershellgallery.com/packages/TrustedSigning/) in PowerShell Gallery to install the PowerShell module.
0 commit comments