指定的提供程序类型无效。 CryptographicException

Question

我正在尝试从Microsoft docs help setting up a Key Vault运行脚本GetAppConfigSettings.ps1

该脚本包含以下内容

# **********************************************************************************************
# Prep the cert credential data
# **********************************************************************************************
$certificateName = "$applicationName" + "cert"
$myCertThumbprint = (New-SelfSignedCertificate -Type Custom -Subject "$certificateName"-KeyUsage DigitalSignature -KeyAlgorithm RSA -KeyLength 2048 -CertStoreLocation "Cert:\CurrentUser\My" -Provider "Microsoft Enhanced Cryptographic Provider v1.0" ).Thumbprint
$x509 = (Get-ChildItem -Path cert:\CurrentUser\My\$myCertthumbprint)
$password = Read-Host -Prompt "Please enter the certificate password." -AsSecureString

# Saving the self-signed cert and pfx (private key) in case it's needed later
Export-Certificate -cert $x509 -FilePath ".\$certificateName.cer"
Export-PfxCertificate -Cert $x509 -FilePath ".\$certificateName.pfx" -Password $password

运行脚本（设置变量后）会产生以下错误

New-SelfSignedCertificate : CertEnroll::CX509Enrollment::_CreateRequest: Provider type not defined. 
0x80090017 (-2146893801 NTE_PROV_TYPE_NOT_DEF)
At \\tsclient\E\EShared\Dev\Microsoft.Azure.KeyVault.Samples-2016.11.22 
(1)\Microsoft.Azure.KeyVault.Samples\scripts\GetAppConfigSettings.ps1:38 char:22
+ ... umbprint = (New-SelfSignedCertificate -Type Custom -Subject "$certifi ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [New-SelfSignedCertificate], Exception
    + FullyQualifiedErrorId : System.Exception,Microsoft.CertificateServices.Commands.NewSelfSignedC 
   ertificateCommand

[更新]

Microsoft支持人员建议我将提供商更改为＆＃34; Microsoft Platform Crypto Provider＆＃34;

但是我仍然得到错误。

对于Powershell，$ PSVersionTable报告5.1.17134.112

我安装了AzureRM 5.7.0版

Answer 1

请使用此示例来学习如何将Key Vault与DotNet一起使用以及如何使用服务主体的证书对Azure Active Directory进行身份验证 https://github.com/Azure-Samples/key-vault-dotnet-quickstart

Answer 2

Microsoft支持帮助我解决了此问题

$myCertThumbprint = (New-SelfSignedCertificate -CertStoreLocation Cert:\CurrentUser\My
-subject MyCert -KeyExportPolicy Exportable -NotAfter (Get-Date).AddYears(10) 
-Type CodeSigningCert -KeySpec Signature).Thumbprint

创建HelloKeyVault app.config所需的AuthClientId和AuthCertThumbprint值。

AuthClientId在门户中显示为“应用程序ID”，并且可以在“注册的应用程序”设置中看到。

要访问它，请单击“ Azure Active Directory”->“应用程序注册” 然后单击查看所有应用程序 点击应用程序，然后设置

要查看相同的指纹，然后单击“键”

我可以看到AuthClientId