-
Notifications
You must be signed in to change notification settings - Fork 211
Description
Describe the bug
I'm trying to install Microsoft.Graph on one of my servers, but it's failing as app control allowlisting is blocking execution of the Unprotect-SecureString script due to it being unsigned (we've allowed Microsoft's signature). I've noted in other packages (e.g. Az.DesktopVirtualization) the same script got signed, so I presume this is possible, and I would have thought it should be security best practice. Can this script be signed?
Expected behavior
Install-Module -Name 'Microsoft.Graph' succeeds without being blocked by app control.
How to reproduce
Run Install-Module -Name 'Microsoft.Graph' on a system that has application allowlisting enabled
SDK Version
2.31.0 and at least 8 versions prior
Latest version known to work for scenario above?
None found
Known Workarounds
We've temp allowed scripts on that server while I install and will re-enable allowlisting when complete
Debug output
No response
Configuration
No response
Other information
No response