Skip to content

Microsoft.Graph.Applications - Intallation failed due to unsigned Unprotect-SecureString #3418

@JakeMoe

Description

@JakeMoe

Describe the bug

I'm trying to install Microsoft.Graph on one of my servers, but it's failing as app control allowlisting is blocking execution of the Unprotect-SecureString script due to it being unsigned (we've allowed Microsoft's signature). I've noted in other packages (e.g. Az.DesktopVirtualization) the same script got signed, so I presume this is possible, and I would have thought it should be security best practice. Can this script be signed?

Expected behavior

Install-Module -Name 'Microsoft.Graph' succeeds without being blocked by app control.

How to reproduce

Run Install-Module -Name 'Microsoft.Graph' on a system that has application allowlisting enabled

SDK Version

2.31.0 and at least 8 versions prior

Latest version known to work for scenario above?

None found

Known Workarounds

We've temp allowed scripts on that server while I install and will re-enable allowlisting when complete

Debug output

No response

Configuration

No response

Other information

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions