powershell - 指定的提供程序类型无效。密码异常

Question

我正在尝试从 Microsoft docs help setting up a Key Vault 运行脚本 GetAppConfigSettings.ps1

该脚本包含以下内容

# **********************************************************************************************
# Prep the cert credential data
# **********************************************************************************************
$certificateName = "$applicationName" + "cert"
$myCertThumbprint = (New-SelfSignedCertificate -Type Custom -Subject "$certificateName"-KeyUsage DigitalSignature -KeyAlgorithm RSA -KeyLength 2048 -CertStoreLocation "Cert:\CurrentUser\My" -Provider "Microsoft Enhanced Cryptographic Provider v1.0" ).Thumbprint
$x509 = (Get-ChildItem -Path cert:\CurrentUser\My\$myCertthumbprint)
$password = Read-Host -Prompt "Please enter the certificate password." -AsSecureString

# Saving the self-signed cert and pfx (private key) in case it's needed later
Export-Certificate -cert $x509 -FilePath ".\$certificateName.cer"
Export-PfxCertificate -Cert $x509 -FilePath ".\$certificateName.pfx" -Password $password

运行脚本(设置变量后)会产生以下错误

New-SelfSignedCertificate : CertEnroll::CX509Enrollment::_CreateRequest: Provider type not defined. 
0x80090017 (-2146893801 NTE_PROV_TYPE_NOT_DEF)
At \\tsclient\E\EShared\Dev\Microsoft.Azure.KeyVault.Samples-2016.11.22 
(1)\Microsoft.Azure.KeyVault.Samples\scripts\GetAppConfigSettings.ps1:38 char:22
+ ... umbprint = (New-SelfSignedCertificate -Type Custom -Subject "$certifi ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [New-SelfSignedCertificate], Exception
    + FullyQualifiedErrorId : System.Exception,Microsoft.CertificateServices.Commands.NewSelfSignedC 
   ertificateCommand

[更新]

Microsoft 支持建议我将提供程序更改为“Microsoft Platform Crypto Provider”

但是我仍然收到错误。

对于 Powershell，$PSVersionTable 报告 5.1.17134.112

我安装了 AzureRM 5.7.0 版

Answer 1

微软支持帮助我解决了这条线

$myCertThumbprint = (New-SelfSignedCertificate -CertStoreLocation Cert:\CurrentUser\My
-subject MyCert -KeyExportPolicy Exportable -NotAfter (Get-Date).AddYears(10) 
-Type CodeSigningCert -KeySpec Signature).Thumbprint

创建了 HelloKeyVault app.config 所需的 AuthClientId 和 AuthCertThumbprint 值。

AuthClientId 在门户中显示为应用程序 ID，并在已注册的应用程序设置中可见。

要访问它，请单击 Azure Active Directory -> 应用程序注册
然后点击查看所有应用程序
单击应用程序然后设置

要查看指纹，请执行相同操作，然后单击“键”



我可以看到 AuthClientId