This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 68%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAT%3C/text%3E%3C/svg%3E)
Our Azure Artifact Signing account is "vidium-signing".
The Public Trust certificate profile "PublicTrustSigning" is shown as
Active. Its identity validation is Completed and valid until 2028-11-30.
The GitHub OIDC service principal has the
"Artifact Signing Certificate Profile Signer" role at the Artifact Signing
account resource scope. Azure OIDC login succeeds.
However, the latest managed short-lived certificate expired on 2026-09-18,
and no replacement certificate has been issued after that date.
GitHub Actions repeatedly fails during Artifact Signing with:
Error: SignerSign() failed. (-2147467259 / 0x80004005)
SignTool Error: An unexpected internal error has occurred.
GitHub Actions run ID: 35681475667
The portal documentation states that these certificates are automatically
renewed daily, but no certificate has been issued since 2026-09-15.
Please help check whether certificate issuance is blocked for this profile
or whether Microsoft needs to restore its renewal state.
A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
The Versions list shows daily certificate issuance through September 15, 2026. The last certificate expired on September 18, 2026, and no new version has appeared after refreshing the portal. Its status still displays “Active” despite the past expiry date.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 52%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
looking into this.
Thank you for looking into this. This is blocking our signed Windows release. The identity validation remains Completed, the signing service principal has the required role, and no new certificate version has appeared since September 15. Could you confirm whether certificate issuance for this profile is being investigated and whether you need any additional diagnostics from us?