Skip to content

Microsoft.Graph.Applications - Intallation failed due to unsigned Unprotect-SecureString #3418

@JakeMoe

Description

@JakeMoe

Describe the bug

I'm trying to install Microsoft.Graph on one of my servers, but it's failing as app control allowlisting is blocking execution of the Unprotect-SecureString script due to it being unsigned (we've allowed Microsoft's signature). I've noted in other packages (e.g. Az.DesktopVirtualization) the same script got signed, so I presume this is possible, and I would have thought it should be security best practice. Can this script be signed?

Expected behavior

Install-Module -Name 'Microsoft.Graph' succeeds without being blocked by app control.

How to reproduce

Run Install-Module -Name 'Microsoft.Graph' on a system that has application allowlisting enabled

SDK Version

2.31.0 and at least 8 versions prior

Latest version known to work for scenario above?

None found

Known Workarounds

We've temp allowed scripts on that server while I install and will re-enable allowlisting when complete

Debug output

No response

Configuration

No response

Other information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    status:waiting-for-triageAn issue that is yet to be reviewed or assignedtype:bugA broken experience

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions