{"StdOut":"******************************************************************************\r\nMachine Information\r\nMachine Name: at-greenPBET5U\r\nMachine Ip: 10.0.0.7\r\nOperating System: Microsoft Windows NT 10.0.26100.0\r\nUser Name: at-greenPBET5U$\r\nProcessor Count: 4\r\nProcess Name: EsrpClient\r\nProcess Id: 11180\r\nCaller Program: EsrpClient.exe\r\nIdentity: NT AUTHORITY\\NETWORK SERVICE\r\nProcess Version: 1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\r\nProcess Bitness: 64 bit\r\n******************************************************************************\r\nCommandline received: Sign | -a | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp2560_729705.json | -p | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp2560_876001.json | -c | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp2560_125337.json | -i | c:\\Temp\\AzureTemp\\TFSTemp\\vctmp3644_42125.json | -o | c:\\Temp\\AzureTemp\\TFSTemp\\v29DF0.tmp | -l | Verbose ESRP session Id is: 4b9403cc-08e1-4ecf-92ce-597eb5e4d7ad\r\n2026-05-04T23:15:03.7956927Z:Command you are trying to use is: Sign\r\n2026-05-04T23:15:03.8018327Z:Correlation Vector for this run is: 65bb7478-e41a-4e82-9de2-6bfdd7f5e726\r\n2026-05-04T23:15:03.8018327Z:Groupid for this run is empty\r\n2026-05-04T23:15:03.9005889Z:request signing cert being used is this thumbprint: CDB803291C204BC98FE987B31030AAC9E75B32FD  in store LocalMachine\\My\r\n2026-05-04T23:15:03.9005889Z:Both certificates validation passed.\r\n2026-05-04T23:15:03.9022679Z:The auth cert we choose to use, subject name is: CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com, thumbprint is: 7918792430054F4DD63CAE7E9982ABF6765F2458\r\n2026-05-04T23:15:03.9553500Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:03Z] ConfidentialClientApplication 37368736 created\r\n2026-05-04T23:15:03.9570626Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:03.9618805Z:There is no memory mapped file accociated with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:03.9638982Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:03.9743023Z:Validate and Renew Token if necessary finished: 00:00:00.0088957\r\n2026-05-04T23:15:04.0613207Z:Session request is: {\r\n  \"expiresAfter\": \"3.00:00:00\",\r\n  \"partitionCount\": 0,\r\n  \"isProvisionStorage\": true,\r\n  \"isLegacyCopsModel\": false,\r\n  \"commandName\": \"Sign\",\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\"\r\n}\r\n2026-05-04T23:15:04.0937129Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z] ConfidentialClientApplication 29578451 created\r\n2026-05-04T23:15:04.0937129Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:04.1022506Z:Gateway Client: a new client and client id is created:  b88db521-de8f-418f-8941-11bfb70b4669\r\n2026-05-04T23:15:04.1417828Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] MSAL MSAL.Desktop with assembly version '4.70.0.0'. CorrelationId(6b0add69-3c9d-4a04-b850-8f5142de4f82)\r\n2026-05-04T23:15:04.1547033Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] === AcquireTokenForClientParameters ===\r\nSendX5C: True\r\nForceRefresh: False\r\nAccessTokenHashToRefresh: False\r\n\r\n2026-05-04T23:15:04.1673120Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] \r\n=== Request Data ===\r\nAuthority Provided? - True\r\nScopes - https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExtra Query Params Keys (space separated) - \r\nApiId - AcquireTokenForClient\r\nIsConfidentialClient - True\r\nSendX5C - True\r\nLoginHint ? False\r\nIsBrokerConfigured - False\r\nHomeAccountId - False\r\nCorrelationId - 6b0add69-3c9d-4a04-b850-8f5142de4f82\r\nUserAssertion set: False\r\nLongRunningOboCacheKey set: False\r\nRegion configured: \r\n\r\n2026-05-04T23:15:04.1681006Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] === Token Acquisition (ClientCredentialRequest) started:\r\n\t Scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n\tAuthority Host: login.microsoftonline.com\r\n2026-05-04T23:15:04.1833152Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-05-04T23:15:04.1833152Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [FindAccessTokenAsync] Discovered 0 access tokens in cache using partition key: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d_AppTokenCache\r\n2026-05-04T23:15:04.1833152Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [FindAccessTokenAsync] No access tokens found in the cache. Skipping filtering. \r\n2026-05-04T23:15:04.1942124Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Instance Discovery] Instance discovery is enabled and will be performed\r\n2026-05-04T23:15:04.1968679Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Region discovery] WithAzureRegion not configured. \r\n2026-05-04T23:15:04.1968679Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Region discovery] Not using a regional authority. \r\n2026-05-04T23:15:04.2008935Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? False. \r\n2026-05-04T23:15:04.2106742Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Fetching instance discovery from the network from host login.microsoftonline.com. \r\n2026-05-04T23:15:04.2301877Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [Oauth2Client] Sending GET request \r\n2026-05-04T23:15:04.2331730Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [HttpManager] ExecuteAsync\r\n2026-05-04T23:15:04.2405594Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [HttpManager] Sending request. Method: GET. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-05-04T23:15:04.6934884Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [HttpManager] Received response. Status code: OK. \r\n2026-05-04T23:15:04.7045502Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [HttpManager] ExecuteAsync in 472 ms\r\n2026-05-04T23:15:04.7045502Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [Oauth2Client] Sending GET request  in 476 ms\r\n2026-05-04T23:15:04.7147123Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [OAuth2Client] Deserializing response\r\n2026-05-04T23:15:04.8384846Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [OAuth2Client] Deserializing response in 123 ms\r\n2026-05-04T23:15:04.8400907Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Instance Discovery] Tried to use network cache provider for login.microsoftonline.com. Success? True. \r\n2026-05-04T23:15:04.8400907Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Instance Discovery] After hitting the discovery endpoint, the network provider found an entry for login.microsoftonline.com ? True. \r\n2026-05-04T23:15:04.8445362Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Authority validation enabled? True. \r\n2026-05-04T23:15:04.8445362Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Authority validation - is known env? True. \r\n2026-05-04T23:15:04.8614643Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting TokenClient:SendTokenRequestAsync\r\n2026-05-04T23:15:04.8652685Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [TokenClient] Before adding the client assertion / secret\r\n2026-05-04T23:15:04.8652685Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Building assertion from certificate with clientId: 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f at endpoint: https://login.microsoftonline.com/33e01921-4d64-4f8c-a055-5bdaffd5e33d/oauth2/v2.0/token\r\n2026-05-04T23:15:04.8652685Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Proceeding with JWT token creation and adding client assertion.\r\n2026-05-04T23:15:04.8941921Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [TokenClient] After adding the client assertion / secret\r\n2026-05-04T23:15:04.9031301Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [Token Client] Fetching MsalTokenResponse .... \r\n2026-05-04T23:15:04.9031301Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [Oauth2Client] Sending POST request \r\n2026-05-04T23:15:04.9089159Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [HttpManager] ExecuteAsync\r\n2026-05-04T23:15:04.9089159Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:04Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [HttpManager] Sending request. Method: POST. Host: https://login.microsoftonline.com. Binding Certificate: False \r\n2026-05-04T23:15:05.1165455Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [HttpManager] Received response. Status code: OK. \r\n2026-05-04T23:15:05.1175605Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [HttpManager] ExecuteAsync in 208 ms\r\n2026-05-04T23:15:05.1175605Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [Oauth2Client] Sending POST request  in 214 ms\r\n2026-05-04T23:15:05.1178607Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Starting [OAuth2Client] Deserializing response\r\n2026-05-04T23:15:05.1328798Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished [OAuth2Client] Deserializing response in 16 ms\r\n2026-05-04T23:15:05.1328798Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] ScopeSet was missing from the token response, so using developer provided scopes in the result. \r\n2026-05-04T23:15:05.1328798Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Finished TokenClient:SendTokenRequestAsync in 272 ms\r\n2026-05-04T23:15:05.1339050Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Checking client info returned from the server..\r\n2026-05-04T23:15:05.1339050Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Saving token response to cache..\r\n2026-05-04T23:15:05.1415599Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] \r\n[MsalTokenResponse]\r\nError: \r\nErrorDescription: \r\nScopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\nExpiresIn: 86399\r\nRefreshIn: 43199\r\nAccessToken returned: True\r\nAccessToken Type: Bearer\r\nRefreshToken returned: False\r\nIdToken returned: False\r\nClientInfo returned: False\r\nFamilyId: \r\nWamAccountId exists: False\r\n2026-05-04T23:15:05.1431345Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [SaveTokenResponseAsync] ID Token not present in response. \r\n2026-05-04T23:15:05.1441525Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Cannot determine home account ID - or id token or no client info and no subject \r\n2026-05-04T23:15:05.1486277Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [SaveTokenResponseAsync] Entering token cache semaphore. Count Real semaphore: True. Count: 1.\r\n2026-05-04T23:15:05.1486277Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [SaveTokenResponseAsync] Entered token cache semaphore. \r\n2026-05-04T23:15:05.1486277Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [SaveTokenResponseAsync] Saving AT in cache and removing overlapping ATs...\r\n2026-05-04T23:15:05.1513641Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Looking for scopes for the authority in the cache which intersect with https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default\r\n2026-05-04T23:15:05.1513641Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z] [Internal cache] Total number of cache partitions found while getting access tokens: 0\r\n2026-05-04T23:15:05.1513641Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Intersecting scope entries count - 0\r\n2026-05-04T23:15:05.1531664Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Not saving to ADAL legacy cache. \r\n2026-05-04T23:15:05.1531664Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] [SaveTokenResponseAsync] Released token cache semaphore. \r\n2026-05-04T23:15:05.1551850Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] \r\n\t=== Token Acquisition finished successfully:\r\n2026-05-04T23:15:05.1568269Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82]  AT expiration time: 5/5/2026 11:15:04 PM +00:00, scopes: https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com/.default. source: IdentityProvider\r\n2026-05-04T23:15:05.1572020Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] Fetched access token from host login.microsoftonline.com. \r\n2026-05-04T23:15:05.1572020Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] \r\n[LogMetricsFromAuthResult] Cache Refresh Reason: NoCachedAccessToken\r\n[LogMetricsFromAuthResult] DurationInCacheInMs: 0\r\n[LogMetricsFromAuthResult] DurationTotalInMs: 996\r\n[LogMetricsFromAuthResult] DurationInHttpInMs: 659\r\n2026-05-04T23:15:05.1572020Z:MSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:05Z - 6b0add69-3c9d-4a04-b850-8f5142de4f82] TokenEndpoint: ****\r\n2026-05-04T23:15:05.1722348Z:Use AAD token. CERT\r\n2026-05-04T23:15:05.1823894Z:New Token Acquisition Time: 00:00:01.0688357\r\n2026-05-04T23:15:05.2032510Z:Gateway Client: the client id that is sending a request is:  b88db521-de8f-418f-8941-11bfb70b4669\r\n2026-05-04T23:15:06.0034336Z:Gateway Client: response send time from cloud gateway:  2026-05-04T23:15:05.8891289+00:00\r\n2026-05-04T23:15:06.0034336Z:Gateway Client: response receive time from client SendAsync:  2026-05-04T23:15:06.0034336+00:00\r\n2026-05-04T23:15:06.0034336Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.1143047\r\n2026-05-04T23:15:06.0887715Z:Session request requestid: 4c3c0115-9de7-4dc0-831b-e944aee7ee67, and submission status is: Pass\r\n2026-05-04T23:15:06.1430928Z:Provision storage complete. Total shards: 100\r\n2026-05-04T23:15:06.1471413Z:Loading DigestSignErrorMappingCache mapping info\r\n2026-05-04T23:15:06.1540282Z:DigestSignErrorMappingCache from server, # of DigestSignOperationErrorPatterns object we get is :: \r\n2026-05-04T23:15:06.1766369Z:Consolidate DigestSignErrorMappingCache, # of DigestSignOperationErrorPatterns object we get is  :: 34\r\n2026-05-04T23:15:06.1782937Z:Successfully retrieved policy: policy is  {\"policy\":{\"id\":\"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f-0\",\"workflowExecutionType\":3}}\r\n2026-05-04T23:15:06.1878979Z:Successfully get telemetry connection string: Endpo......\r\n2026-05-04T23:15:06.1899214Z:Warning: \r\n2026-05-04T23:15:06.1930766Z:IAuthInfo constructed: {\r\n  \"authenticationType\": \"AAD_CERT\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"tenantId\": \"33e01921-4d64-4f8c-a055-5bdaffd5e33d\",\r\n  \"aadAuthorityBaseUri\": \"https://login.microsoftonline.com/\",\r\n  \"authCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f.microsoft.com\",\r\n    \"sendX5c\": true,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"requestSigningCert\": {\r\n    \"storeLocation\": \"LocalMachine\",\r\n    \"storeName\": \"My\",\r\n    \"subjectName\": \"CN=0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n    \"sendX5c\": false,\r\n    \"withAzureRegion\": false,\r\n    \"getCertFromKeyVault\": false,\r\n    \"keyVaultName\": null,\r\n    \"keyVaultCertName\": null\r\n  },\r\n  \"oAuthToken\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"esrpClientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"federatedTokenData\": null,\r\n  \"federatedTokenPath\": null\r\n}\r\n2026-05-04T23:15:06.1939637Z:IPolicyInfo constructed: {\r\n  \"intent\": \"digestsign\",\r\n  \"contentType\": \"Bin\",\r\n  \"contentOrigin\": \"3rd Party\",\r\n  \"productState\": null,\r\n  \"audience\": \"External Broad\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-05-04T23:15:06.1977670Z:IConfigInfo constructed: {\r\n  \"esrpApiBaseUri\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"esrpSessionTimeoutInSec\": 60,\r\n  \"minThreadPoolThreads\": 16,\r\n  \"maxDegreeOfParallelism\": 16,\r\n  \"exponentialFirstFastRetry\": true,\r\n  \"exponentialRetryCount\": 2,\r\n  \"exponentialRetryDeltaBackOff\": \"00:00:05\",\r\n  \"exponentialRetryMaxBackOff\": \"00:01:00\",\r\n  \"exponentialRetryMinBackOff\": \"00:00:03\",\r\n  \"appDataFolder\": \"C:\\\\Windows\\\\ServiceProfiles\\\\NetworkService\\\\AppData\\\\Local\",\r\n  \"certificateCacheFolder\": null,\r\n  \"version\": \"1.0.0\",\r\n  \"exitOnFlaggedFile\": false,\r\n  \"flaggedFileClientWaitTimeout\": \"1.00:00:00\",\r\n  \"servicePointManagerDefaultConnectionLimit\": 16,\r\n  \"isOnPremGateway\": false,\r\n  \"diagnosticListeners\": null,\r\n  \"securityProtocolType\": \"Tls12\",\r\n  \"parallelOperationsInFileUploadDownload\": 300,\r\n  \"maxTelemetryBuffer\": 200000,\r\n  \"telemetryTimeoutInSec\": 0,\r\n  \"resourceUri\": \"https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com\",\r\n  \"cacheRootFolder\": null,\r\n  \"cachedFileTTLInMin\": 7200\r\n}\r\n2026-05-04T23:15:06.4215877Z:Client Telemetry: Xpert agent is not running on the machine. Using events hub for processing client telemetry.\r\n2026-05-04T23:15:06.5931724Z:Key: TotalSignOperationDataCount, Value: 1\r\n2026-05-04T23:15:06.6065174Z:Start Time:5/4/2026 11:15:06 PM, Starting the sign workflow...\r\n2026-05-04T23:15:06.6156467Z:some input info: {\r\n  \"contextData\": {\r\n    \"build_buildnumber\": \"AzureDevOps_M272_20260409.11\",\r\n    \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n    \"userIpAddress\": \"10.0.0.7\",\r\n    \"userAgent\": \"at-greenPBET5U\"\r\n  },\r\n  \"sourceDirectory\": null,\r\n  \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\",\r\n  \"destinationDirectory\": null,\r\n  \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\",\r\n  \"sizeInBytes\": 0,\r\n  \"name\": \"manifest.cat\",\r\n  \"isSuccess\": null,\r\n  \"operationStartedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationEndedAt\": \"0001-01-01T00:00:00+00:00\",\r\n  \"operationDurationMS\": 0,\r\n  \"processName\": \"EsrpClient\",\r\n  \"processId\": 11180,\r\n  \"processVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n  \"customerCorrelationId\": null,\r\n  \"esrpClientSessionGuid\": \"4b9403cc-08e1-4ecf-92ce-597eb5e4d7ad\",\r\n  \"callerProgram\": \"EsrpClient\",\r\n  \"indentity\": \"NT AUTHORITY\\\\NETWORK SERVICE\",\r\n  \"clientId\": \"0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f\",\r\n  \"exceptionData\": null,\r\n  \"apiBaseUrl\": \"https://api.esrp.microsoft.com/api/v2/\",\r\n  \"handlerWorkflow\": \"Sign\",\r\n  \"submissionRequest\": {\r\n    \"contextData\": {\r\n      \"build_buildnumber\": \"AzureDevOps_M272_20260409.11\",\r\n      \"esrpClientVersion\": \"1.2.142+Branch.master.Sha.90404b43284ec55b3e2251d0e272f8932aa583e2\",\r\n      \"userIpAddress\": \"10.0.0.7\",\r\n      \"userAgent\": \"at-greenPBET5U\"\r\n    },\r\n    \"groupId\": null,\r\n    \"correlationVector\": \"65bb7478-e41a-4e82-9de2-6bfdd7f5e726\",\r\n    \"driEmail\": null,\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"policyInfo\": {\r\n    \"intent\": \"digestsign\",\r\n    \"contentType\": \"Bin\",\r\n    \"contentOrigin\": \"3rd Party\",\r\n    \"productState\": null,\r\n    \"audience\": \"External Broad\",\r\n    \"version\": \"1.0.0\"\r\n  },\r\n  \"osVersion\": \"Microsoft Windows NT 10.0.26100.0\",\r\n  \"executingMachineIPAddress\": \"10.0.0.7\"\r\n}\r\n2026-05-04T23:15:06.6619199Z:Executing SignWorkflowType is DigestSignStaticAzure\r\n2026-05-04T23:15:06.6779515Z:Source file \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" hashed in 3 ms\r\n2026-05-04T23:15:06.7107120Z:Thread: 1 - Certificate file mutex \"WTICzCagrOtykwsRdCJh/9IAJwuSReX6xdQaJ0ar+iU=_CP-464321\" acquired (waited 0 ms).\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:06Z] ConfidentialClientApplication 44123454 created\r\n2026-05-04T23:15:06.7211986Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:06.7232188Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:06.7232188Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:06.7953545Z:Global cached token is valid from 5/4/2026 11:10:05 PM to 5/5/2026 11:15:05 PM (UTC). Total validity from current time is 86398.2059353 seconds\r\n2026-05-04T23:15:06.7953545Z:Validate and Renew Token if necessary finished: 00:00:00.0716287\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:06Z] ConfidentialClientApplication 20852350 created\r\n2026-05-04T23:15:06.7953545Z:Gateway Client: Enter AuthenticationProvider, no calls to AAD yet, client id is 0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f, and resource url is https://msazurecloud.onmicrosoft.com/api.esrp.microsoft.com, tenant id is 33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:06.7953545Z:Gateway Client: a new client and client id is created:  f572c19e-6cb1-444d-ad3f-4bdc8db3de60\r\n2026-05-04T23:15:06.7953545Z:5/4/2026 11:15:06 PM +00:00:Digest Signing Factory Client type loaded is - [AzureGatewaySubmitter].\r\n2026-05-04T23:15:06.8021552Z:Existing Token Acquisition Time: 00:00:00.0003931\r\n2026-05-04T23:15:06.8676231Z:Gateway Client: the client id that is sending a request is:  f572c19e-6cb1-444d-ad3f-4bdc8db3de60\r\n2026-05-04T23:15:07.0578958Z:Gateway Client: response send time from cloud gateway:  2026-05-04T23:15:07.0408725+00:00\r\n2026-05-04T23:15:07.0586582Z:Gateway Client: response receive time from client SendAsync:  2026-05-04T23:15:07.0586582+00:00\r\n2026-05-04T23:15:07.0586582Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0177857\r\n2026-05-04T23:15:07.0617291Z:Gateway Client: response time after converting from http response to object:  2026-05-04T23:15:07.0617291+00:00\r\n2026-05-04T23:15:07.5889293Z:Existing Token Acquisition Time: 00:00:00.0007041\r\n2026-05-04T23:15:07.5929534Z:Gateway Client: the client id that is sending a request is:  f572c19e-6cb1-444d-ad3f-4bdc8db3de60\r\n2026-05-04T23:15:07.6155433Z:Client Telemetry: Events published in this batch: 4\r\n2026-05-04T23:15:07.6155433Z:Client Telemetry: Events received so far in this session: 4\r\n2026-05-04T23:15:07.6155433Z:Client Telemetry: Events published so far in this session: 4\r\n2026-05-04T23:15:07.8211539Z:Gateway Client: response send time from cloud gateway:  2026-05-04T23:15:07.7803958+00:00\r\n2026-05-04T23:15:07.8211539Z:Gateway Client: response receive time from client SendAsync:  2026-05-04T23:15:07.8211539+00:00\r\n2026-05-04T23:15:07.8220923Z:Gateway Client: response duration time between cloud gateway and client SendAsync:  00:00:00.0407581\r\n2026-05-04T23:15:07.8272167Z:Gateway Client: response time after converting from http response to object:  2026-05-04T23:15:07.8272167+00:00\r\n2026-05-04T23:15:07.8312545Z:Reading thumbprint from \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_4b9403cc08e14ecf92ce597eb5e4d7ad\\Certificates\\CP-464321.p7b\" (9692 bytes)...\r\n2026-05-04T23:15:07.8568564Z:Thread: 1 - Wrote new certificate file to \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_4b9403cc08e14ecf92ce597eb5e4d7ad\\Certificates\\CP-464321.p7b\".\r\n2026-05-04T23:15:07.8568564Z:Thread: 1 - Certificate file mutex \"WTICzCagrOtykwsRdCJh/9IAJwuSReX6xdQaJ0ar+iU=_CP-464321\" released (held for 1146 ms).\r\n2026-05-04T23:15:07.8572777Z:digest sign request expire time is: 5/4/2026 11:16:06 PM\r\n2026-05-04T23:15:10.7258207Z:Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe sign    /NPH  /fd \"SHA256\" /f \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_4b9403cc08e14ecf92ce597eb5e4d7ad\\Certificates\\CP-464321.p7b\" /sha1 \"464FA2A9D4A43EA5C3E53CE4562B501CB6EFA47F\" /du \"https://www.1eswiki.com/wiki/ADO_Manifest_Generator\" /d \"Packaging SSSC Codesign - DigestSign\" /tr \"http://aztss.trafficmanager.net/TSS/HttpTspServer\" /td sha256 /dlib \"c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\EsrpClient.Sign.DigestSignLib.dll\" /dmdf \"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\EsrpClient_4b9403cc08e14ecf92ce597eb5e4d7ad\\282FB36DD87D4AC498543C3F563E1BED.json\" \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" completed in 2868 ms\r\nExit Code: 0\r\nStdOut:\r\nDone Adding Additional Store\r\n\r\nESRP Digest Signing\r\n\r\n2026-05-04T23:15:08.6580313Z:Digest Signer : SecurityProtocolType used from the metadata info is : Tls12\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:08Z] ConfidentialClientApplication 654897 created\r\n2026-05-04T23:15:08.7866427Z:Cached token found with name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:08.7886575Z:AAD auth caching is in use with this name: api.esrp.microsoft.com_0d3b5b1a-8684-4f3a-b294-66c3b9aa8c8f_33e01921-4d64-4f8c-a055-5bdaffd5e33d\r\n2026-05-04T23:15:08.8971019Z:Global cached token is valid from 5/4/2026 11:10:05 PM to 5/5/2026 11:15:05 PM (UTC). Total validity from current time is 86396.1028981 seconds\r\n2026-05-04T23:15:08.8976877Z:Validate and Renew Token if necessary finished: 00:00:00.1082873\r\nMSAL logging: False MSAL 4.70.0.0 MSAL.Desktop 4.8 or later Windows Server 2025 Datacenter Azure Edition [2026-05-04 23:15:08Z] ConfidentialClientApplication 49044892 created\r\n2026-05-04T23:15:08.9571010Z:Existing Token Acquisition Time: 00:00:00.0022451\r\n2026-05-04T23:15:09.6383844Z:Gateway Submission Request Signing Time: 00:00:00.1325643\r\n2026-05-04T23:15:09.6383844Z:Gateway Submission Request Send Time: 00:00:00.5254451\r\n2026-05-04T23:15:09.6383844Z:Gateway Submission Overall Submission Time: 00:00:00.6787081\r\n2026-05-04T23:15:09.6383844Z:Operation ID: 80b38aad-6af1-4618-a8e3-1467504a6b0e\r\n2026-05-04T23:15:10.1406329Z:Gateway Status Delay Time: 00:00:00.5024675\r\n2026-05-04T23:15:10.1519560Z:Existing Token Acquisition Time: 00:00:00.0008006\r\n2026-05-04T23:15:10.3968602Z:Gateway Status Request Send Time: 00:00:00.2415723\r\n2026-05-04T23:15:10.3968602Z:Gateway Status Overall Time: 00:00:00.2440019\r\n2026-05-04T23:15:10.4067454Z:Gateway Submission Duration: 977\r\n2026-05-04T23:15:10.4067454Z:Gateway Submission Attempts: 1\r\n2026-05-04T23:15:10.4067454Z:Gateway GetStatus Duration: 256\r\n2026-05-04T23:15:10.4067454Z:Gateway GetStatus Attempts: 1\r\n2026-05-04T23:15:10.4067454Z:$$5a9f5111cf8f42a0a0edc419862b95dc##_ThrottleCount: 0\r\n2026-05-04T23:15:10.4067454Z:$$65265a48891640eb86e148d3c9a627fa##_ThrottledTimeInSec: 0\r\n2026-05-04T23:15:10.4067454Z:Service Call: 1873.5948 ms\r\nSuccessfully signed: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\n\r\n\r\n\r\nStdErr:\r\n\r\n\r\n\r\n\r\n2026-05-04T23:15:10.9032515Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-05-04T23:15:10.9046652Z:Warning: Warning: Operation Error (1) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" - Retrying in 500 ms...\r\n2026-05-04T23:15:11.0419632Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-05-04T23:15:11.0419632Z:Warning: Warning: Operation Error (2) - Operation: signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" - Retrying in 500 ms...\r\n2026-05-04T23:15:11.1862092Z:Client Telemetry: Events published in this batch: 3\r\n2026-05-04T23:15:11.1862092Z:Client Telemetry: Events received so far in this session: 7\r\n2026-05-04T23:15:11.1862092Z:Client Telemetry: Events published so far in this session: 7\r\n2026-05-04T23:15:11.6483104Z:Warning: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n2026-05-04T23:15:11.6823936Z:\r\n2026-05-04T23:15:11.6832786Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n2026-05-04T23:15:11.7229181Z:Client Telemetry: Events published in this batch: 1\r\n2026-05-04T23:15:11.7229181Z:Client Telemetry: Events received so far in this session: 9\r\n2026-05-04T23:15:11.7229181Z:Client Telemetry: Events published so far in this session: 8\r\n2026-05-04T23:15:11.7235836Z:Constructing EsrpClientResponse\r\n2026-05-04T23:15:11.7253630Z:EsrpClientResponse is constructed\r\n2026-05-04T23:15:11.7613109Z:OperationDurationMs: 5072\r\n2026-05-04T23:15:11.7613109Z:DynamicCertGenerationTimeMs: 0\r\n2026-05-04T23:15:11.7613109Z:TimeToGetStorageShradsMs: 0\r\n2026-05-04T23:15:11.7613109Z:TotalScanSubmissionTimeMs: 0\r\n2026-05-04T23:15:11.7613109Z:ThrottleCount: 0\r\n2026-05-04T23:15:11.7613109Z:ThrottledTimeInSec: 0\r\n2026-05-04T23:15:11.7613109Z:\r\n2026-05-04T23:15:11.7613109Z:0/1 files signed in 00:00:05.072 (0 files/s, total number of certs refreshed: 0)\r\n2026-05-04T23:15:11.7653566Z:result json is: {\r\n  \"submissionResponses\": [\r\n    {\r\n      \"fileStatusDetail\": [\r\n        {\r\n          \"sourceHash\": \"aZTEiiDgAh5L06jMaLLDxhUHaMGf+iq10aGKek5678c=\",\r\n          \"hashType\": \"sha256\",\r\n          \"destinationHash\": null,\r\n          \"certificateThumbprint\": null,\r\n          \"destinationLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\",\r\n          \"destinationFileSizeInBytes\": 0,\r\n          \"sourceLocation\": \"c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\"\r\n        }\r\n      ],\r\n      \"operationId\": \"80b38aad-6af1-4618-a8e3-1467504a6b0e\",\r\n      \"customerCorrelationId\": \"65bb7478-e41a-4e82-9de2-6bfdd7f5e726\",\r\n      \"statusCode\": \"failCanRetry\",\r\n      \"errorInfo\": {\r\n        \"code\": \"3138\",\r\n        \"details\": {\r\n          \"operation\": \"c:\\\\AT\\\\sitesroot\\\\0\\\\bin\\\\Plugins\\\\ESRPClient\\\\Win10.x86\\\\signtool.exe verify  /pa /tw \\\"c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\\\"\",\r\n          \"exitCode\": \"1\",\r\n          \"stdOut\": \"File: c:\\\\Temp\\\\AzureTemp\\\\csosccuo.tph\\\\manifest.cat\\r\\nIndex  Algorithm  Timestamp    \\r\\n========================================\\r\\n\\r\\nNumber of errors: 1\\r\\n\\r\\n\\r\\n\",\r\n          \"stdErr\": \"SignTool Error: A certificate chain processed, but terminated in a root\\r\\n\\tcertificate which is not trusted by the trust provider.\\r\\n\\r\\n\"\r\n        },\r\n        \"innerError\": null\r\n      }\r\n    }\r\n  ],\r\n  \"esrpClientSessionGuid\": \"4b9403cc-08e1-4ecf-92ce-597eb5e4d7ad\",\r\n  \"version\": \"1.0.0\"\r\n}\r\n2026-05-04T23:15:11.8258646Z:Warning: \r\n\r\n2026-05-04T23:15:11.8258646Z:esrp-client-finalTime: 8878.0092\r\n2026-05-04T23:15:11.8258646Z:Final return code is: 1\r\n2026-05-04T23:15:11.8258646Z:ClientTelemetryDispose started, this is not affecting Exe reliability, only lost telemetry if error happens ***********************\r\n2026-05-04T23:15:11.8438781Z:Client Telemetry: Flushing telemetry buffer with timeout 0 ms\r\n2026-05-04T23:15:11.8459028Z:Client Telemetry: Flushing telemetry buffer completed within timeout (true/false): False\r\n2026-05-04T23:15:11.8459028Z:Client Telemetry: Disposing telemetry buffer and event hub client\r\n2026-05-04T23:15:11.9632991Z:Warning: event lost number: 3\r\n2026-05-04T23:15:11.9632991Z:total event processed number: 8\r\n2026-05-04T23:15:11.9632991Z:total event received number: 11\r\n2026-05-04T23:15:11.9632991Z:##EsrpClientTelemetry.TotalEventsProcessed##: 8\r\n2026-05-04T23:15:11.9632991Z:##EsrpClientTelemetry.TotalEventsReceived##: 11\r\n2026-05-04T23:15:11.9632991Z:##EsrpClientTelemetry.DisposeTimeMilliseconds##: 137\r\n2026-05-04T23:15:11.9632991Z:ClientTelemetryDispose ended ***********************\r\n","StdErr":"2026-05-04T23:15:11.6832786Z:Error: System.AggregateException: One or more errors occurred. ---> MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)\r\n   --- End of inner exception stack trace ---\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<DigestSignAsync>d__23.MoveNext()\r\n---> (Inner Exception #0) MS.Ess.EsrpClient.Sign.Exceptions.EsrpDigestSignExecuteProcessFailedException: Operation: c:\\AT\\sitesroot\\0\\bin\\Plugins\\ESRPClient\\Win10.x86\\signtool.exe verify  /pa /tw \"c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\" failed\r\nExit Code: 1\r\nStdOut:\r\nFile: c:\\Temp\\AzureTemp\\csosccuo.tph\\manifest.cat\r\nIndex  Algorithm  Timestamp    \r\n========================================\r\n\r\nNumber of errors: 1\r\n\r\n\r\n\r\nStdErr:\r\nSignTool Error: A certificate chain processed, but terminated in a root\r\n\tcertificate which is not trusted by the trust provider.\r\n\r\n\r\n\r\n\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass27_0.<ExecuteDigestSignOperation>b__1()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.<>c__DisplayClass1.<ExecuteAction>b__0()\r\n   at Microsoft.Practices.EnterpriseLibrary.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.ExecuteDigestSignOperation(Input digestSignInput, Operation digestSignOperation, SignOperationData fileEntry, SignStatusResponse completionResponse, SignCommandDefinition param, Guid correlationId, String correlationVector, CancellationToken cancellationToken, String requestId, String tmpDestinationLocation)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.DigestSignInternal(Input digestSignInput, SignCommandDefinition param, Guid& correlationId, String correlationVector, CancellationToken cancellationToken, String groupId, SignOperationData fileEntry, Int32& signedFileCount, Int32& certRefreshCount, ConcurrentBag`1 completionResponses, RetryPolicy`1 operationRetryPolicy, String dynamicCertificateFile, String dynamicCertificateThumbprint, String requestId)\r\n   at MS.Ess.EsrpClient.Sign.SignHandlers.SignJobHandler.<>c__DisplayClass23_3.<DigestSignAsync>b__6(SignOperationData fileEntry)<---\r\n\r\n","ExitCode":1,"RunningTime":"00:00:09.7822869"}