Skip to content

Microsoft.Graph.Applications - Intallation failed due to unsigned Unprotect-SecureString #3418

@JakeMoe

Description

@JakeMoe

Describe the bug

I'm trying to install Microsoft.Graph on one of my servers, but it's failing as app control allowlisting is blocking execution of the Unprotect-SecureString script due to it being unsigned (we've allowed Microsoft's signature). I've noted in other packages (e.g. Az.DesktopVirtualization) the same script got signed, so I presume this is possible, and I would have thought it should be security best practice. Can this script be signed?

Expected behavior

Install-Module -Name 'Microsoft.Graph' succeeds without being blocked by app control.

How to reproduce

Run Install-Module -Name 'Microsoft.Graph' on a system that has application allowlisting enabled

SDK Version

2.31.0 and at least 8 versions prior

Latest version known to work for scenario above?

None found

Known Workarounds

We've temp allowed scripts on that server while I install and will re-enable allowlisting when complete

Debug output

No response

Configuration

No response

Other information

No response

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions