What docs or details specifically are needed for Trusted Signing accounts?

Question

I submitted an Identity Validation request and it sent me an email asking for:

Category 1: (Provide one of the following documents.)

1. Assignment letter from an authorized representative of the organization
2. Domain ownership records, such as Whois
3. Domain purchase invoices or registry confirmation records
4. Website showing name, address, contact information, and domain of the organization

I submitted a PDF letter w/ multiple pages containing all information about the organization, including the state copies of LLC registration, website domain, address, contact info, and dba filings.

Barely an hour later I literally get the exact same request for information as above, with NO DETAILS about what is missing or invalid in the previous uploaded document?

How is this a service that Microsoft is charging money for??

Answer 1

Still no real response here. Clearly Trusted Signing is nowhere near ready.

I cancelled my account, and in just over a day I've already got an OV cert from SSL.com verified using the same documentation I provided here. I was even able to get clear instructions from their support team and ask about future proofing my OV processes.

It's a shame a Microsoft product isn't the go-to solution for codesigning a Windows application!

Answer 2

Without an identity validation id, it's hard to help your specific scenario. However, please also make sure the documents uploaded meet the following requirements:

https://learn.microsoft.com/en-us/azure/trusted-signing/quickstart?tabs=registerrp-cli%2Caccount-portal%2Ccertificateprofile-portal%2Cdeleteresources-portal#important-information-for-public-identity-validation

More documentation

If we need more documentation to process the identity validation request, you're notified through email. You can upload the documents in the Azure portal. The documentation request email contains information about file size requirements. Ensure that any documents you provide are the most current. - All documents submitted must be issued within the previous 12 months or where the expiration date is a future date that is at least two months away. - If it is not possible to provide additional documentation, please update your account information to match any legal documents already provided or your official Company registration details. - When providing official business document, such as business registration form, business charter, or articles of incorporation that list the company name and address as it is provided at the time of Identity Validation request creation. - Ensure the domain registration or domain invoice from registration or renewal that lists the entity/contact name and domain as it is state on the request.

Answer 3

Totally understand the frustration. We can only provide generic help unless we know the name of the org or the id, to reach out to the team here.