search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.19k stars 21.33k forks source link

Trusted Signing identity validation failed - no way forward? #122571

Open benediktadams opened 3 months ago

benediktadams commented 3 months ago

Hi,

I've went through setting up Trusted Signing following this guide: https://github.com/koaladsp/KoalaDocs/blob/master/azure-code-signing-for-plugin-developers.md

Unfortunately I just received an email from Microsoft saying, that the validation status of my company is now failed, without any further explanation on why it failed or how to resolve it. My company has been properly registered in Germany since 2021, i submitted our DUNS number, I can provide tax receipts, whatever is needed, but I was never asked for any additional information, before the status changed to "failed".

I double-checked the submitted information again, it's all correct, it's publicly verifiable and I don't understand why it would fail.

There is (seemingly?) no way to get in touch about this, so I'm writing here, sorry if this is the wrong place, I don't know what to do next, since I don't even know what's going on.

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

PesalaPavan commented 3 months ago

@benediktadams It would be great if you could add a link to the documentation you are following for these steps? This would help us redirect the issue to the appropriate team. Thanks!!

benediktadams commented 3 months ago

Hey @PesalaPavan

I've followed this tutorial: https://github.com/koaladsp/KoalaDocs/blob/master/azure-code-signing-for-plugin-developers.md

And I've verified that all I've done is in line with this official documentation: https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/trusted-signing/quickstart.md

(unrelated, but this readme has broken image embeds at the relevant sections for me, when you look for "Failed" on the page you'll find it at the first hit)

My problem is not the signup/setup process itself, everything went smoothly until I got rejected after waiting for public identity validation - which failed, and I got no notice on why it failed. I'd really like to fix it, and I can provide everything necessary, but I was never contacted that anything I already provided was incomplete or wrong or couldn't be validated. I provided all the correct information as outlined in your documentations, but I got no notice on what was wrong with it while being rejected.

benediktadams commented 3 months ago

I want to add, there are 2 MINOR differences in what info I was technically able to provide given input restrictions on the relevant forms and what info is registered publicly for my company.

  1. One of the most common German incorporation types is a "GmbH & Co. KG". Hence the "&" symbol is part of the officially registered company name, like "Awesomename GmbH & Co. KG". As the Identity Validation form didn't take the "&" symbol I replaced it with the literal abbreviation, which is accepted anywhere else where the & doesn't work, so I spelled it "GmbH u. Co. KG" - which deviates from public record where they use "&".

  2. My company street address number follows the format "12/3". The input form wouldn't accept the forward-slash. So I provided "12-3", which is an acceptable alternative format for the same street address number - public record uses the format with the forward-slash.

These are the 2 deviations I see from providing the 100% accurate information that can be publicly verified about my company, and they're both due to restrictions on the Identity Validation input form.

AjayBathini-MSFT commented 3 months ago

@benediktadams Thanks for bringing this to our attention. I'm going to assign this to the document author so they can take a look at it accordingly.

benediktadams commented 3 months ago

Hey, any updates/help/input on this? I really would like to get our Trusted Signing validation going, but just blindly restarting the process without knowing WHY it failed the first time is pointless...

CamiloTerevinto commented 3 months ago

Hi, we have had 2 validation failures now and each one has taken like 2 weeks, making this process a massive waste of time.

Saying that it "Failed" without giving a clear reason makes it impossible for us to know what we need to change before we start the process again. The email sent to us when the validation fails just links to the Azure Portal home page, making it useless.

mehasharma commented 3 months ago

@benediktadams and @CamiloTerevinto can you both help with your Org names, so we can check with the team here.

CamiloTerevinto commented 3 months ago

Hey @mehasharma - "Integrated Environmental Solutions Limited" is the name of the org we tried, in the North Europe region.

benediktadams commented 3 months ago

Hey @mehasharma , our org name is "Yum Audio GmbH & Co. KG" (or as I had to spell it in your public validation form due to input limitations: "Yum Audio GmbH u. Co. KG"). Country/Region Germany.

benediktadams commented 3 months ago

Hey @mehasharma , I just submitted a new Validation request with ID 11dbc1b7-dd6b-4f95-b8f0-a9f0934d413c

This time, the Street address field accepted my company street address with format "12/3". So the forwad-slash support was apparently added since I last tried.

On company name i still had to replace the "&" symbol with "u."

This time I submitted our Tax ID instead of our DUNS number, hope this works.

benediktadams commented 3 months ago

@mehasharma disregard! Now it worked, it went to status "Completed" within 10 min of my re-submit! For anyone else interested, the difference in my submission now was that I first submitted using our DUNS number and now i submitted using our Tax ID (VAT ID).

Excited to move on and try out Trusted Signing!

//Edit: not closing the issue because Camilo is still waiting for a response, feel free to close as far as I'm concerned

mehasharma commented 3 months ago

@CamiloTerevinto Looks like the request created on 23rd May has email verification pending. The email is sent to the primary email address provided at the time of request creation. This email link expires on May 31st.

@benediktadams Great news! Glad it finally worked. Let me take the feedback back to the validation team wrt Duns number not working the first time.

CamiloTerevinto commented 3 months ago

Thanks @mehasharma, the IT department is taking care of the process and apparently they don't monitor the address used as primary as there is no mention that emails will be sent there for validation. We've done the validation today.

mehasharma commented 3 months ago

@CamiloTerevinto Integrated Environmental Solutions Limited is all set.

Actually, it does say: https://learn.microsoft.com/en-us/azure/trusted-signing/quickstart?tabs=registerrp-portal%2Caccount-portal%2Ccertificateprofile-portal%2Cdeleteresources-portal#create-an-identity-validation-request

CamiloTerevinto commented 3 months ago

Amazing, thanks @mehasharma! I was referring to the Portal, but you are right that the documentation states that.

Feel free to close this, thanks again.

MikeJerred commented 2 months ago

I am having this issue also. Tried to register my company "Logic Over Snacks Ltd" but it keeps saying validation failed with no explanation. It failed several times with me trying different values for the fields and now when I try it just fails without requesting documents or anything.

mehasharma commented 2 months ago

@MikeJerred If the identity validation team is unable to verify the organization's information, the requests will fail. Please ensure the public records are upto date with the organization's information.

MikeJerred commented 2 months ago

@MikeJerred If the identity validation team is unable to verify the organization's information, the requests will fail. Please ensure the public records are upto date with the organization's information.

Hey, as far as I can tell that info is correct and up-to-date and matches my submission. This is the UK public record site: https://find-and-update.company-information.service.gov.uk/company/13289971

mehasharma commented 2 months ago

@MikeJerred Understood, however, we are dependent on what our systems can process and provide as outcome.

MikeJerred commented 2 months ago

@MikeJerred Understood, however, we are dependent on what our systems can process and provide as outcome.

Not sure I understand, how am I supposed to get this approved? It is not really possible without some kind of error message saying what is wrong or missing.

pateskinasy commented 1 month ago

Hi @mehasharma, I'd be grateful if you could also look at my case. I've been experiencing the same problem for a month now. I'm a UK-based company and have provided all the requested documents, including my DUNS number and UTR number. I've tried everything to resolve the issue, but nothing seems to work.

The support representative suggested creating multiple new Trusted Accounts, which has resulted in a large upcoming charge. However, I'm still unable to use the service.

I even tried creating a new subscription, but it was unsuccessful. My latest unsuccessful attempt has Trusted Account - Identity Validation ID: b6111136-6984-496b-899c-743eea52eaf2

PS: Happy to provide input/feedback to have the system improved (as so many in these threads seem to be struggling)

mehasharma commented 1 month ago

@pateskinasy Let me reach out to the team here and get back.

mehasharma commented 1 month ago

@pateskinasy I see you all reached out to someone else from Support and they are working with you, I believe they have the latest response for you.

MikeJerred commented 1 month ago

@mehasharma do you have any insight into what is wrong with my request? The latest ID is b49e7988-b52e-48ed-8389-d37861252917

mehasharma commented 1 month ago

Hello @MikeJerred Unfortunately no specific updates to share, the only update that was provided is they cannot move forward with the request.

pateskinasy commented 1 month ago

@mehasharma I haven't heard back from the team and the ticket seems stuck for several days now with no clear guidance of what next steps would be. Would you be able to help?

mehasharma commented 1 month ago

@pateskinasy Please delete any unnecessary accounts that you do not need to stop unnecessary billing. Unfortunately, if the validation team is not able to validate the information provided, we are unable to proceed. Refer to this section to help you further: https://learn.microsoft.com/en-us/azure/trusted-signing/quickstart?tabs=registerrp-portal%2Caccount-portal%2Ccertificateprofile-portal%2Cdeleteresources-portal#important-information-for-public-identity-validation

anna-biruk commented 4 weeks ago

@mehasharma, I have the same problem with identity validation failing. The latest ID is 2ac3d7cd-e004-4d72-8e7c-747e4eedef8a. Could you please provide guidance or advice on how to resolve this issue? Your help would be greatly appreciated.

mehasharma commented 3 weeks ago

@anna-biruk The validation team is unable to validate using the information provided. We cannot move forward unless the validation team successfully validates the organization. Please delete any unnecessary accounts that you do not need to stop unnecessary billing.