{"StdOut":"******************************************************************************\r\nMachine Information\r\nMachine Name: at-blueHFU6RC\r\nMachine Ip: 10.0.0.31\r\nOperating System: Microsoft Windows NT 10.0.26100.0\r\nUser Name: at-blueHFU6RC$\r\nProcessor Count: 4\r\nProcess Name: EsrpClient\r\nProcess Id: 10988\r\nCaller Program: EsrpClient.exe\r\nIdentity: NT AUTHORITY\\NETWORK SERVICE\r\nProcess Version: 1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\r\nProcess Bitness: 64 bit\r\n******************************************************************************\r\nCommandline received: Sign | -a | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp3912_572594.json | -p | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp3912_799631.json | -c | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp3912_548917.json | -i | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp3168_540005.json | -o | c:\\Temp\\AzureTemp\\TFSTemp\\v39A81F.tmp | -l | Verbose ESRP session Id is: 52e4700e-8d22-4897-81b7-28c536898d98\r\n2026-03-31T14:35:40.8041288Z:Command you are trying to use is: Sign\r\n2026-03-31T14:35:40.8105612Z:Correlation Vector for this run is: 69fc4322-8798-47ee-b6d9-252a06d40eba\r\n2026-03-31T14:35:40.8105612Z:Groupid for this run is empty\r\n2026-03-31T14:35:40.8972221Z:request signing cert being used is this thumbprint: CDB803291C204BC98FE987B31030AAC9E75B32FD  in store LocalMachine\\My\r\n2026-03-31T14:35:40.8972221Z:Both certificates validation passed.\r\n2026-03-31T14:35:40.8982051Z:The auth cert we choose to use, subject name is: CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com, thumbprint is: 7918792430054F4DD63CAE7E9982ABF6765F2458\r\n2026-03-31T14:35:40.9471896Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:40Z] ConfidentialClientApplication 37368736 created\r\n2026-03-31T14:35:40.9471896Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:40.9519337Z:There is no memory mapped file accociated with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:40.9547491Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:40.9621524Z:Validate and Renew Token if necessary finished: 00:00:00.0061752\r\n2026-03-31T14:35:41.0387223Z:Session request is: {\r\n  \"expiresAfter\": \"3.00:00:00\",\r\n  \"partitionCount\": 0,\r\n  \"isProvisionStorage\": true,\r\n  \"isLegacyCopsModel\": false,\r\n  \"commandName\": \"Sign\",\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\"\r\n}\r\n2026-03-31T14:35:41.0698564Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z] ConfidentialClientApplication 29578451 created\r\n2026-03-31T14:35:41.0703145Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:41.0759339Z:Gateway Client: a new client and client id is created:  af68b4fa-4be0-4715-b864-d8c74d39180d\r\n2026-03-31T14:35:41.1172494Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] MSAL MSAL.Desktop with assembly version '4.70.0.0'. CorrelationId(dd68686d-26c9-42f7-8a53-55d9ae7f1fc1)\r\n2026-03-31T14:35:41.1293753Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] === AcquireTokenForClientParameters ===\r\nSendX5C: True\r\nForceRefresh: False\r\nAccessTokenHashToRefresh: False\r\n\r\n2026-03-31T14:35:41.1395080Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] \r\n=== Request Data ===\r\nAuthority Provided? - True\r\nScopes - https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExtra Query Params Keys (space separated) - \r\nApiId - AcquireTokenForClient\r\nIsConfidentialClient - True\r\nSendX5C - True\r\nLoginHint ? False\r\nIsBrokerConfigured - False\r\nHomeAccountId - False\r\nCorrelationId - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1\r\nUserAssertion set: False\r\nLongRunningOboCacheKey set: False\r\nRegion configured: \r\n\r\n2026-03-31T14:35:41.1395080Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] === Token Acquisition (ClientCredentialRequest) started:\r\n\t Scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n\tAuthority Host: login.microsoftonline.com\r\n2026-03-31T14:35:41.1552288Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-03-31T14:35:41.1552288Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [FindAccessTokenAsync] Discovered 0 access tokens in cache using partition key: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d_AppTokenCache\r\n2026-03-31T14:35:41.1552288Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [FindAccessTokenAsync] No access tokens found in the cache. Skipping filtering. \r\n2026-03-31T14:35:41.1628784Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Instance Discovery] Instance discovery is enabled and will be performed\r\n2026-03-31T14:35:41.1669152Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Region discovery] WithAzureRegion not configured. \r\n2026-03-31T14:35:41.1682340Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Region discovery] Not using a regional authority. \r\n2026-03-31T14:35:41.1722796Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? False. \r\n2026-03-31T14:35:41.1824853Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Fetching instance discovery from the network from host login.microsoftonline.com. \r\n2026-03-31T14:35:41.1984796Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [Oauth2Client] Sending GET request \r\n2026-03-31T14:35:41.2010384Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [HttpManager] ExecuteAsync\r\n2026-03-31T14:35:41.2071123Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [HttpManager] Sending request. Method: GET. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-03-31T14:35:41.7102657Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [HttpManager] Received response. Status code: OK. \r\n2026-03-31T14:35:41.7218636Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [HttpManager] ExecuteAsync in 520 ms\r\n2026-03-31T14:35:41.7218636Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [Oauth2Client] Sending GET request  in 523 ms\r\n2026-03-31T14:35:41.7321542Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [OAuth2Client] Deserializing response\r\n2026-03-31T14:35:41.8472899Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [OAuth2Client] Deserializing response in 115 ms\r\n2026-03-31T14:35:41.8494688Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? True. \r\n2026-03-31T14:35:41.8494688Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Instance Discovery] After hitting the discovery endpoint, the network provider found an entry for login.microsoftonline.com ? True. \r\n2026-03-31T14:35:41.8528588Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Authority validation enabled? True. \r\n2026-03-31T14:35:41.8528588Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Authority validation - is known env? True. \r\n2026-03-31T14:35:41.8696129Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting TokenClient:SendTokenRequestAsync\r\n2026-03-31T14:35:41.8728002Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [TokenClient] Before adding the client assertion / secret\r\n2026-03-31T14:35:41.8736648Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Building assertion from certificate with clientId: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f at endpoint: https://login.microsoftonline.com/33e01921-4d64-4f8c-a055-5bdaffd5e33d/oauth2/v2.0/token\r\n2026-03-31T14:35:41.8736648Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Proceeding with JWT token creation and adding client assertion.\r\n2026-03-31T14:35:41.8985285Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [TokenClient] After adding the client assertion / secret\r\n2026-03-31T14:35:41.9063682Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [Token Client] Fetching MsalTokenResponse .... \r\n2026-03-31T14:35:41.9063682Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [Oauth2Client] Sending POST request \r\n2026-03-31T14:35:41.9105104Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [HttpManager] ExecuteAsync\r\n2026-03-31T14:35:41.9105104Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:41Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [HttpManager] Sending request. Method: POST. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-03-31T14:35:42.2261189Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [HttpManager] Received response. Status code: OK. \r\n2026-03-31T14:35:42.2261189Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [HttpManager] ExecuteAsync in 315 ms\r\n2026-03-31T14:35:42.2261189Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [Oauth2Client] Sending POST request  in 320 ms\r\n2026-03-31T14:35:42.2268595Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Starting [OAuth2Client] Deserializing response\r\n2026-03-31T14:35:42.2439053Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished [OAuth2Client] Deserializing response in 18 ms\r\n2026-03-31T14:35:42.2439053Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] ScopeSet was missing from the token response, so using developer provided scopes in the result. \r\n2026-03-31T14:35:42.2457250Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Finished TokenClient:SendTokenRequestAsync in 376 ms\r\n2026-03-31T14:35:42.2478367Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Checking client info returned from the server..\r\n2026-03-31T14:35:42.2478367Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Saving token response to cache..\r\n2026-03-31T14:35:42.2597138Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] \r\n[MsalTokenResponse]\r\nError: \r\nErrorDescription: \r\nScopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExpiresIn: 86399\r\nRefreshIn: 43199\r\nAccessToken returned: True\r\nAccessToken Type: Bearer\r\nRefreshToken returned: False\r\nIdToken returned: False\r\nClientInfo returned: False\r\nFamilyId: \r\nWamAccountId exists: False\r\n2026-03-31T14:35:42.2618601Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [SaveTokenResponseAsync] ID Token not present in response. \r\n2026-03-31T14:35:42.2618601Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Cannot determine home account ID - or id token or no client info and no subject \r\n2026-03-31T14:35:42.2689901Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [SaveTokenResponseAsync] Entering token cache semaphore. Count Real semaphore: True. Count: 1.\r\n2026-03-31T14:35:42.2689901Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [SaveTokenResponseAsync] Entered token cache semaphore. \r\n2026-03-31T14:35:42.2689901Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [SaveTokenResponseAsync] Saving AT in cache and removing overlapping ATs...\r\n2026-03-31T14:35:42.2718465Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Looking for scopes for the authority in the cache which intersect with https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n2026-03-31T14:35:42.2718465Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-03-31T14:35:42.2724004Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Intersecting scope entries count - 0\r\n2026-03-31T14:35:42.2744209Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Not saving to ADAL legacy cache. \r\n2026-03-31T14:35:42.2749396Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] [SaveTokenResponseAsync] Released token cache semaphore. \r\n2026-03-31T14:35:42.2784270Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] \r\n\t=== Token Acquisition finished successfully:\r\n2026-03-31T14:35:42.2794291Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1]  AT expiration time: 4/1/2026 2:35:41 PM +00:00, scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default. source: IdentityProvider\r\n2026-03-31T14:35:42.2794291Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] Fetched access token from host login.microsoftonline.com. \r\n2026-03-31T14:35:42.2814527Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] \r\n[LogMetricsFromAuthResult] Cache Refresh Reason: NoCachedAccessToken\r\n[LogMetricsFromAuthResult] DurationInCacheInMs: 0\r\n[LogMetricsFromAuthResult] DurationTotalInMs: 1145\r\n[LogMetricsFromAuthResult] DurationInHttpInMs: 816\r\n2026-03-31T14:35:42.2814527Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:42Z - dd68686d-26c9-42f7-8a53-55d9ae7f1fc1] TokenEndpoint: ****\r\n2026-03-31T14:35:42.3051889Z:Use AAD token. CERT\r\n2026-03-31T14:35:42.3147935Z:New Token Acquisition Time: 00:00:01.2294248\r\n2026-03-31T14:35:42.3414513Z:Gateway Client: the client id that is sending a request is:  af68b4fa-4be0-4715-b864-d8c74d39180d\r\n2026-03-31T14:35:43.0733247Z:Gateway Client: response send time from cloud gateway:  2026-03-31T14:35:43.0107850+00:00\r\n2026-03-31T14:35:43.0739257Z:Gateway Client: response receive time from client SendAsync:  2026-03-31T14:35:43.0733247+00:00\r\n2026-03-31T14:35:43.0739257Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0625397\r\n2026-03-31T14:35:43.1496002Z:Session request requestid: 8b87ab55-fdda-46fa-810e-362e881b72ee, and submission status is: Pass\r\n2026-03-31T14:35:43.1914496Z:Provision storage complete. Total shards: 100\r\n2026-03-31T14:35:43.1942339Z:Loading DigestSignErrorMappingCache mapping info\r\n2026-03-31T14:35:43.2013241Z:DigestSignErrorMappingCache from server, # of DigestSignOperationErrorPatterns object we get is :: \r\n2026-03-31T14:35:43.2210764Z:Consolidate DigestSignErrorMappingCache, # of DigestSignOperationErrorPatterns object we get is  :: 34\r\n2026-03-31T14:35:43.2210764Z:Successfully retrieved policy: policy is  {\"policy\":{\"id\":\"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f-0\",\"workflowExecutionType\":3}}\r\n2026-03-31T14:35:43.2343810Z:Successfully get telemetry connection string: Endpo......\r\n2026-03-31T14:35:43.2360551Z:Warning: \r\n2026-03-31T14:35:43.2379095Z:IAuthInfo constructed: {\r\n  \"authenticationType\": \"AAD_CERT\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"tenantId\": \"33e01921-4d64-4f8c-a055-5bdaffd5e33d\",\r\n  \"aadAuthorityBaseUri\": \"https://login.microsoftonline.com/\",\r\n  \"authCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com\",\r\n    \"sendX5c\": true,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"requestSigningCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n    \"sendX5c\": false,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"oAuthToken\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"esrpClientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"federatedTokenData\": null,\r\n  \"federatedTokenPath\": null\r\n}\r\n2026-03-31T14:35:43.2395955Z:IPolicyInfo constructed: {\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-03-31T14:35:43.2424711Z:IConfigInfo constructed: {\r\n  \"esrpApiBaseUri\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"esrpSessionTimeoutInSec\": 60,\r\n  \"minThreadPoolThreads\": 16,\r\n  \"maxDegreeOfParallelism\": 16,\r\n  \"exponentialFirstFastRetry\": true,\r\n  \"exponentialRetryCount\": 2,\r\n  \"exponentialRetryDeltaBackOff\": \"00:00:05\",\r\n  \"exponentialRetryMaxBackOff\": \"00:01:00\",\r\n  \"exponentialRetryMinBackOff\": \"00:00:03\",\r\n  \"appDataFolder\": \"C:\\\\Windows\\\\ServiceProfiles\\\\NetworkService\\\\AppData\\\\Local\",\r\n  \"certificateCacheFolder\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"exitOnFlaggedFile\": false,\r\n  \"flaggedFileClientWaitTimeout\": \"1.00:00:00\",\r\n  \"servicePointManagerDefaultConnectionLimit\": 16,\r\n  \"isOnPremGateway\": false,\r\n  \"diagnosticListeners\": null,\r\n  \"securityProtocolType\": \"Tls12\",\r\n  \"parallelOperationsInFileUploadDownload\": 300,\r\n  \"maxTelemetryBuffer\": 200000,\r\n  \"telemetryTimeoutInSec\": 0,\r\n  \"resourceUri\": \"https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com\",\r\n  \"cacheRootFolder\": null,\r\n  \"cachedFileTTLInMin\": 7200\r\n}\r\n2026-03-31T14:35:43.4461021Z:Client Telemetry: Xpert agent is not running on the machine. Using events hub for processing client telemetry.\r\n2026-03-31T14:35:43.6411454Z:Key: TotalSignOperationDataCount, Value: 1\r\n2026-03-31T14:35:43.6543325Z:Start Time:3/31/2026 2:35:43 PM, Starting the sign workflow...\r\n2026-03-31T14:35:43.6633249Z:some input info: {\r\n  \"contextData\": {\r\n    \"build_buildnumber\": \"AzureDevOps_M271_20260325.1\",\r\n    \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n    \"userIpAddress\": \"10.0.0.31\",\r\n    \"userAgent\": \"at-blueHFU6RC\"\r\n  },\r\n  \"sourceDirectory\": null,\r\n  \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\",\r\n  \"destinationDirectory\": null,\r\n  \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\",\r\n  \"sizeInBytes\": 0,\r\n  \"name\": \"manifest.cat\",\r\n  \"isSuccess\": null,\r\n  \"operationStartedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationEndedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationDurationMS\": 0,\r\n  \"processName\": \"EsrpClient\",\r\n  \"processId\": 10988,\r\n  \"processVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n  \"customerCorrelationId\": null,\r\n  \"esrpClientSessionGuid\": \"52e4700e-8d22-4897-81b7-28c536898d98\",\r\n  \"callerProgram\": \"EsrpClient\",\r\n  \"indentity\": \"NT AUTHORITY\\\\NETWORK SERVICE\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"exceptionData\": null,\r\n  \"apiBaseUrl\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"handlerWorkflow\": \"Sign\",\r\n  \"submissionRequest\": {\r\n    \"contextData\": {\r\n      \"build_buildnumber\": \"AzureDevOps_M271_20260325.1\",\r\n      \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n      \"userIpAddress\": \"10.0.0.31\",\r\n      \"userAgent\": \"at-blueHFU6RC\"\r\n    },\r\n    \"groupId\": null,\r\n    \"correlationVector\": \"69fc4322-8798-47ee-b6d9-252a06d40eba\",\r\n    \"driEmail\": null,\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"policyInfo\": {\r\n    \"intent\": \"digestsign\",\r\n    \"contentType\": \"Bin\",\r\n    \"contentOrigin\": \"3rd Party\",\r\n    \"productState\": null,\r\n    \"audience\": \"External Broad\",\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"osVersion\": \"Microsoft Windows NT 10.0.26100.0\",\r\n  \"executingMachineIPAddress\": \"10.0.0.31\"\r\n}\r\n2026-03-31T14:35:43.7085071Z:Executing SignWorkflowType is DigestSignStaticAzure\r\n2026-03-31T14:35:43.7204555Z:Source file \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" hashed in 2 ms\r\n2026-03-31T14:35:43.7561885Z:Thread: 1 - Certificate file mutex \"0gKn0J5Y/gOAeKyyur0OxYRkwlDOdg8hLjy+/4W/o/k=_CP-464321\" acquired (waited 0 ms).\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:43Z] ConfidentialClientApplication 44123454 created\r\n2026-03-31T14:35:43.7688147Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:43.7699943Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:43.7708383Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:43.8689258Z:Global cached token is valid from 3/31/2026 2:30:42 PM to 4/1/2026 2:35:42 PM (UTC). Total validity from current time is 86398.1310742 seconds\r\n2026-03-31T14:35:43.8689258Z:Validate and Renew Token if necessary finished: 00:00:00.0987394\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:43Z] ConfidentialClientApplication 20852350 created\r\n2026-03-31T14:35:43.8689258Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:43.8689258Z:Gateway Client: a new client and client id is created:  e26d3087-c183-4c53-843f-deec60b80186\r\n2026-03-31T14:35:43.8689258Z:3/31/2026 2:35:43 PM +00:00:Digest Signing Factory Client type loaded is - [AzureGatewaySubmitter].\r\n2026-03-31T14:35:43.8786435Z:Existing Token Acquisition Time: 00:00:00.0004346\r\n2026-03-31T14:35:43.9518054Z:Gateway Client: the client id that is sending a request is:  e26d3087-c183-4c53-843f-deec60b80186\r\n2026-03-31T14:35:44.2975271Z:Gateway Client: response send time from cloud gateway:  2026-03-31T14:35:44.2555699+00:00\r\n2026-03-31T14:35:44.2975271Z:Gateway Client: response receive time from client SendAsync:  2026-03-31T14:35:44.2975271+00:00\r\n2026-03-31T14:35:44.2975271Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0419572\r\n2026-03-31T14:35:44.2990504Z:Gateway Client: response time after converting from http response to object:  2026-03-31T14:35:44.2990504+00:00\r\n2026-03-31T14:35:44.6599448Z:Client Telemetry: Events published in this batch: 4\r\n2026-03-31T14:35:44.6599448Z:Client Telemetry: Events received so far in this session: 4\r\n2026-03-31T14:35:44.6599448Z:Client Telemetry: Events published so far in this session: 4\r\n2026-03-31T14:35:44.8104070Z:Existing Token Acquisition Time: 00:00:00.0006930\r\n2026-03-31T14:35:44.8129506Z:Gateway Client: the client id that is sending a request is:  e26d3087-c183-4c53-843f-deec60b80186\r\n2026-03-31T14:35:44.9615356Z:Gateway Client: response send time from cloud gateway:  2026-03-31T14:35:44.9455747+00:00\r\n2026-03-31T14:35:44.9615356Z:Gateway Client: response receive time from client SendAsync:  2026-03-31T14:35:44.9615356+00:00\r\n2026-03-31T14:35:44.9615356Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0159609\r\n2026-03-31T14:35:44.9676098Z:Gateway Client: response time after converting from http response to object:  2026-03-31T14:35:44.9676098+00:00\r\n2026-03-31T14:35:44.9714081Z:Reading thumbprint from \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_52e4700e8d22489781b728c536898d98\\Certificates\\CP-464321.p7b\" (9692 bytes)...\r\n2026-03-31T14:35:45.0013471Z:Thread: 1 - Wrote new certificate file to \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_52e4700e8d22489781b728c536898d98\\Certificates\\CP-464321.p7b\".\r\n2026-03-31T14:35:45.0013471Z:Thread: 1 - Certificate file mutex \"0gKn0J5Y/gOAeKyyur0OxYRkwlDOdg8hLjy+/4W/o/k=_CP-464321\" released (held for 1245 ms).\r\n2026-03-31T14:35:45.0023632Z:digest sign request expire time is: 3/31/2026 2:36:43 PM\r\n2026-03-31T14:35:48.2820502Z:Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe sign    /NPH  /fd \"SHA256\" /f \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_52e4700e8d22489781b728c536898d98\\Certificates\\CP-464321.p7b\" /sha1 \"464FA2A9D4A43EA5C3E53CE4562B501CB6EFA47F\" /du \"https://www.1eswiki.com/wiki/ADO_Manifest_Generator\" /d \"Packaging SSSC Codesign - DigestSign\" /tr \"http://aztss.trafficmanager.net/TSS/HttpTspServer\" /td sha256 /dlib \"c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\EsrpClient.Sign.DigestSignLib.dll\" /dmdf \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_52e4700e8d22489781b728c536898d98\\975B52F146AD42EBBE3CA394313D0C57.json\" \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" completed in 3280 ms\r\nExit Code: 0\r\nStdOut:\r\nDone Adding Additional Store\r\n\r\nESRP Digest Signing\r\n\r\n2026-03-31T14:35:45.9036737Z:Digest Signer : SecurityProtocolType used from the metadata info is : Tls12\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:46Z] ConfidentialClientApplication 654897 created\r\n2026-03-31T14:35:46.0597933Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:46.0610565Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-03-31T14:35:46.1837092Z:Global cached token is valid from 3/31/2026 2:30:42 PM to 4/1/2026 2:35:42 PM (UTC). Total validity from current time is 86395.8162908 seconds\r\n2026-03-31T14:35:46.1837092Z:Validate and Renew Token if necessary finished: 00:00:00.1223078\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-03-31 14:35:46Z] ConfidentialClientApplication 49044892 created\r\n2026-03-31T14:35:46.2517300Z:Existing Token Acquisition Time: 00:00:00.0028825\r\n2026-03-31T14:35:47.0827822Z:Gateway Submission Request Signing Time: 00:00:00.1605756\r\n2026-03-31T14:35:47.0827822Z:Gateway Submission Request Send Time: 00:00:00.6508906\r\n2026-03-31T14:35:47.0827822Z:Gateway Submission Overall Submission Time: 00:00:00.8275670\r\n2026-03-31T14:35:47.0827822Z:Operation ID: de549f0f-6ba0-4c1d-8776-189953aafbcf\r\n2026-03-31T14:35:47.5926013Z:Gateway Status Delay Time: 00:00:00.5096604\r\n2026-03-31T14:35:47.6007472Z:Existing Token Acquisition Time: 00:00:00.0006405\r\n2026-03-31T14:35:47.7470821Z:Gateway Status Request Send Time: 00:00:00.1420456\r\n2026-03-31T14:35:47.7470821Z:Gateway Status Overall Time: 00:00:00.1439036\r\n2026-03-31T14:35:47.7557441Z:Gateway Submission Duration: 1176\r\n2026-03-31T14:35:47.7557441Z:Gateway Submission Attempts: 1\r\n2026-03-31T14:35:47.7557441Z:Gateway GetStatus Duration: 154\r\n2026-03-31T14:35:47.7557441Z:Gateway GetStatus Attempts: 1\r\n2026-03-31T14:35:47.7557441Z:$$5a9f5111cf8f42a0a0edc419862b95dc##_ThrottleCount: 0\r\n2026-03-31T14:35:47.7557441Z:$$65265a48891640eb86e148d3c9a627fa##_ThrottledTimeInSec: 0\r\n2026-03-31T14:35:47.7557441Z:Service Call: 1964.9318 ms\r\nSuccessfully signed: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\n\r\n\r\n\r\nStdErr:\r\n\r\n\r\n\r\n\r\n2026-03-31T14:35:48.4444420Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-03-31T14:35:48.4464628Z:Warning: Warning: Operation Error (1) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" - Retrying in 500 ms...\r\n2026-03-31T14:35:48.5718758Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-03-31T14:35:48.5718758Z:Warning: Warning: Operation Error (2) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" - Retrying in 500 ms...\r\n2026-03-31T14:35:48.7700646Z:Client Telemetry: Events published in this batch: 3\r\n2026-03-31T14:35:48.7700646Z:Client Telemetry: Events received so far in this session: 7\r\n2026-03-31T14:35:48.7700646Z:Client Telemetry: Events published so far in this session: 7\r\n2026-03-31T14:35:49.1871213Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-03-31T14:35:49.2103536Z:\r\n2026-03-31T14:35:49.2110181Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n2026-03-31T14:35:49.2473851Z:Constructing EsrpClientResponse\r\n2026-03-31T14:35:49.2479947Z:EsrpClientResponse is constructed\r\n2026-03-31T14:35:49.2723326Z:OperationDurationMs: 5546\r\n2026-03-31T14:35:49.2723326Z:DynamicCertGenerationTimeMs: 0\r\n2026-03-31T14:35:49.2723326Z:TimeToGetStorageShradsMs: 0\r\n2026-03-31T14:35:49.2723326Z:TotalScanSubmissionTimeMs: 0\r\n2026-03-31T14:35:49.2723326Z:ThrottleCount: 0\r\n2026-03-31T14:35:49.2723326Z:ThrottledTimeInSec: 0\r\n2026-03-31T14:35:49.2723326Z:\r\n2026-03-31T14:35:49.2723326Z:0/1 files signed in 00:00:05.546 (0 files/s, total number of certs refreshed: 0)\r\n2026-03-31T14:35:49.2747989Z:result json is: {\r\n  \"submissionResponses\": [\r\n    {\r\n      \"fileStatusDetail\": [\r\n        {\r\n          \"sourceHash\": \"C5Q1Gz19vCAhADZ+AXDZgJQOSqOD5wLPlKZbSDOEZ/E=\",\r\n          \"hashType\": \"sha256\",\r\n          \"destinationHash\": null,\r\n          \"certificateThumbprint\": null,\r\n          \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\",\r\n          \"destinationFileSizeInBytes\": 0,\r\n          \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\"\r\n        }\r\n      ],\r\n      \"operationId\": \"de549f0f-6ba0-4c1d-8776-189953aafbcf\",\r\n      \"customerCorrelationId\": \"69fc4322-8798-47ee-b6d9-252a06d40eba\",\r\n      \"statusCode\": \"failCanRetry\",\r\n      \"errorInfo\": {\r\n        \"code\": \"3138\",\r\n        \"details\": {\r\n          \"operation\": \"c:\\\\AT\\\\sitesroot\\\\0\\\\bin\\\\Plugins\\\\ESRPClient\\\\Win10.x86\\\\signtool.exe verify  /pa /tw \\\"c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\\\"\",\r\n          \"exitCode\": \"1\",\r\n          \"stdOut\": \"File: c:\\\\Temp\\\\AzureTemp\\\\ch5vwhfr.xxw\\\\manifest.cat\\r\\nIndex  Algorithm  Timestamp    \\r\\n========================================\\r\\n\\r\\nNumber of errors: 1\\r\\n\\r\\n\\r\\n\",\r\n          \"stdErr\": \"SignTool Error: A certificate chain processed, but terminated in a root\\r\\n\\tcertificate which is not trusted by the trust provider.\\r\\n\\r\\n\"\r\n        },\r\n        \"innerError\": null\r\n      }\r\n    }\r\n  ],\r\n  \"esrpClientSessionGuid\": \"52e4700e-8d22-4897-81b7-28c536898d98\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-03-31T14:35:49.3014787Z:Client Telemetry: Events published in this batch: 3\r\n2026-03-31T14:35:49.3014787Z:Client Telemetry: Events received so far in this session: 11\r\n2026-03-31T14:35:49.3014787Z:Client Telemetry: Events published so far in this session: 10\r\n2026-03-31T14:35:49.3121735Z:Warning: \r\n\r\n2026-03-31T14:35:49.3121735Z:esrp-client-finalTime: 9345.168\r\n2026-03-31T14:35:49.3121735Z:Final return code is: 1\r\n2026-03-31T14:35:49.3121735Z:ClientTelemetryDispose started, this is not affecting Exe reliability, only lost telemetry if error happens ***********************\r\n2026-03-31T14:35:49.3166527Z:Client Telemetry: Flushing telemetry buffer with timeout 0 ms\r\n2026-03-31T14:35:49.3186652Z:Client Telemetry: Flushing telemetry buffer completed within timeout (true/false): False\r\n2026-03-31T14:35:49.3186652Z:Client Telemetry: Disposing telemetry buffer and event hub client\r\n2026-03-31T14:35:49.4143854Z:Warning: event lost number: 1\r\n2026-03-31T14:35:49.4143854Z:total event processed number: 10\r\n2026-03-31T14:35:49.4143854Z:total event received number: 11\r\n2026-03-31T14:35:49.4143854Z:##EsrpClientTelemetry.TotalEventsProcessed##: 10\r\n2026-03-31T14:35:49.4143854Z:##EsrpClientTelemetry.TotalEventsReceived##: 11\r\n2026-03-31T14:35:49.4143854Z:##EsrpClientTelemetry.DisposeTimeMilliseconds##: 101\r\n2026-03-31T14:35:49.4143854Z:ClientTelemetryDispose ended ***********************\r\n","StdErr":"2026-03-31T14:35:49.2110181Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\ch5vwhfr.xxw\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n","ExitCode":1,"RunningTime":"00:00:10.1687297"}