identity validation id

Author: TacoTechSharma

articles/trusted-signing/faq.yml

@@ -52,7 +52,7 @@ sections:
           No. If you delete a certificate profile, any certificates that were previously issued or used under that profile will remain valid - they won't be revoked.
       - question: Does Trusted Signing allow me to use a custom CN? 
         answer: |
-          Per the CA/B Forum baseline requirements for publicly trusted code signing certs, CN values must be the legal entity's validated name (e.g. Microsoft Corporation) so there isn't much flexibility in CN values. However, a `O` value allows for verified legal names, trade names, and DBAs (doing business as). For individuals, there are already requirements for verification of individuals in the baseline requirements that we meet.
+          Per the CA/B Forum baseline requirements for publicly trusted code signing certs, CN values must be the legal entity's validated name (e.g. Microsoft Corporation) so there is no flexibility in CN values. For O, at this time Trusted Signing does not support customization. 
       - question: What do I do if the new identity validation button on the Azure portal is greyed out?
         answer: |
           This means you do not have the Identity Verifier role assigned to your account. Follow the [Assigning roles in Trusted Signing](https://learn.microsoft.com/azure/trusted-signing/tutorial-assign-roles) documentation to assign yourself the appropriate role. 
@@ -123,6 +123,8 @@ sections:
       - question: What if I change the Subscription ID or Tenant ID?
         answer: |
          At the moment, Trusted Signing resources can't be migrated across Subscriptions or Tenants. Hence, any change to Tenant ID or Subscription ID will need fro you to create all the Trusted Signing resources again.
-  
+      - question: Does Trusted Signing issue EV certificates?
+        answer: |
+          No, Trusted Signing does not issue EV certificates and there are no plans to issue these in the future.
 ##additionalContent: |
     ## Next steps

articles/trusted-signing/media/trusted-signing-identity-validation-id.png

@@ -270,6 +270,17 @@ A certificate profile resource is the logical container of the certificates that
 
 # [Azure CLI](#tab/certificateprofile-cli)
 
+**Prerequisites**
+You need the Identity Validation ID for the entity that the certificate profile is being created for. The below steps will guide you to obtain your Identity Validation ID from Azure Portal. 
+
+1. Navigate to your Trusted Signing account in the Azure portal.
+2. From either the Trusted Signing account overview page or from Objects, select **Identity Validation**.
+3. Select the hyperlink for the relevant entity, from the panel on the right you can copy the **Identity validation Id**.
+
+:::image type="content" source="media/trusted-signing-identity-validation-id.png" alt-text="Screenshot of trusted-signing-identity-validation-id." lightbox="media/trusted-signing-identity-validation-id.png":::
+
+
+
 To create a certificate profile with Azure CLI, follow these steps:
 
 1. Create a certificate profile using the following command: