What happened?
The built-in utility that helps to create and configure an Entra ID application Register-Monkey365Application generates a certificate using a 1024-bit RSA key.
Microsoft Entra ID is now forcing RSA keys to be at least 2048 bits. As a result, applications configured using Monkey365’s automatically generated certificate may be unable to authenticate.
How to reproduce it
Steps to reproduce the behavior:
- Run Register-Monkey365Application without supplying a custom certificate, allowing Monkey365 to generate one automatically.
$p = @{
TenantId = '00000000-0000-0000-0000-000000000000';
Services = 'ExchangeOnline', 'MicrosoftGraph', 'MicrosoftTeams', 'SharePointOnline'
}
Register-Monkey365Application @p
- Configure Monkey365 to authenticate using the generated certificate.
- See errors when authenticating to Entra ID
Authentication fails because the generated certificate uses a 1024-bit RSA key, and users may see potential errors such as:
AADSTS700027: RSA key size 1024 is less than the minimum required 2048 bits
Expected behavior
The built-in utility should generate a certificate using an RSA key size of at least 2048 bits, allowing the resulting Entra ID application to authenticate successfully.
What happened?
The built-in utility that helps to create and configure an Entra ID application Register-Monkey365Application generates a certificate using a 1024-bit RSA key.
Microsoft Entra ID is now forcing RSA keys to be at least 2048 bits. As a result, applications configured using Monkey365’s automatically generated certificate may be unable to authenticate.
How to reproduce it
Steps to reproduce the behavior:
Authentication fails because the generated certificate uses a 1024-bit RSA key, and users may see potential errors such as:
AADSTS700027: RSA key size 1024 is less than the minimum required 2048 bitsExpected behavior
The built-in utility should generate a certificate using an RSA key size of at least 2048 bits, allowing the resulting Entra ID application to authenticate successfully.