Public Trust certificate profile creation fails with UnknownError after successful organization identity validation

Question

I am unable to create a Public Trust certificate profile in Artifact Signing. Two attempts have failed with an unclassified backend error. Could a moderator please route this to the Artifact Signing product team for investigation using the correlation IDs below?

What is working:

• Microsoft.CodeSigning resource provider: Registered
• Artifact Signing account: provisioned, provisioning state Succeeded
• Artifact Signing Identity Verifier and Artifact Signing Certificate Profile Signer roles: both assigned to my user at the account scope
• Organization / Public identity validation: status Completed (AU10TIX Verified ID presentation succeeded)
• Public Trust Test certificate profile: created successfully against the same identity validation

What is failing:

Creating a Public Trust certificate profile in the Azure portal, using the same completed identity validation that the Public Trust Test profile used. The profile is created in a Failed provisioning state and has no Overview content. The portal shows only "The resource operation completed with terminal provisioning state 'Failed'." The nested error in the activity log JSON is:

"code": "UnknownError",

"message": "Some error occured. Correlation id - ... Timestamp - ..."

Attempt 1:

• Profile name: edc-code-signing-profile-01
• Correlation ID: 7a979a86-3b26-4f41-b9fd-dc49cec0cbc4
• Error timestamp: 2026-09-22T22:03:12.5942751Z

Attempt 2 (new profile name, same settings):

• Profile name: edc-code-signing-profile-02
• Correlation ID: 44a4df36-24ec-4675-9856-be1b419f97f3
• Error timestamp: 2026-09-22T22:48:35.4742290Z

Resource details:

• Artifact Signing account: parsomni-code-sign-acct
• Resource group: rg-parsomni-sign
• Region: West US
• Identity validation ID: 4e60cc87-17cf-4eff-9a5b-59d81cb56dfb
• Organization type: Organization / Public, United States

Since the identity validation completed and a Public Trust Test profile was created without issue against it, this does not appear to be an RBAC, resource provider, or identity validation problem. The failure looks specific to the public certificate issuance path. Both failed profiles are still present in the account in case they are useful for diagnosis.

I am happy to provide the subscription ID, tenant ID, or any other details privately. Thank you.