Change Primary email

Question

I have successfully created a singing identity and a certificate.

However I need to change the Primary email on the identity.

If I try to create a new identity I'm told I already have one with a different email.

How can I do this?

Answer 1

Hello Michael T,

Azure Trusted Signing identities are immutable primary email cannot be changed after creation due to legal validation binding. Must delete & recreate with new email.​

Step-by-Step Fix

1. Assign Required Role

text
Azure Portal → Trusted Signing Account → Access control (IAM)
→ Add role → "Trusted Signing Identity Verifier"
→ Assign to your account

2. Delete Existing Identity

text
Trusted Signing Account → Identity Validation → Select identity
→ Delete → Confirm (breaks linked cert profiles temporarily)

3. Create New Identity

text
Identity Validation → New Identity Validation
→ **Primary Email**: New email address
→ **Secondary Email**: Different email (same domain recommended)
→ Complete verification flow

Important Notes

• Downtime: 1-7 business days for new validation​

Cert Profiles: Recreate after new identity completes

• No Recovery: Deleted identities cannot be restored
• Same Domain: Primary/secondary emails should match domains​

New identity deploys in ~24-48hrs (faster than initial validation). If it helps, accpet the answer.

Cheers,

Jerald Felix