EXPECTED ERROR: Update-Module dbatools Authenticode Issue for 2.5.5

[potatoqualitee]

Fix: dbatools Update-Module Install-Module SkipPublisherCheck Error (August 2025)

The Error You're Seeing

PackageManagement\Install-Package : Authenticode issuer 'CN=dbatools, O=dbatools,
L=Vienna, S=Virginia, C=US' of the new module 'dbatools' with version '2.5.5' from
root certificate authority 'CN=Microsoft Identity Verification Root Certificate
Authority 2020, O=Microsoft Corporation, C=US' is not matching with the authenticode
issuer 'CN=dbatools, O=dbatools, L=Vienna, S=Virginia, C=US' of the previously-installed
module 'dbatools' with version '2.5.1' from root certificate authority 'CN=DigiCert
Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US'. If you still want to
install or update, use -SkipPublisherCheck parameter.

Or similar error for dbatools.library.

Quick Fix

# Use Install-Module even when you need to update
Install-Module dbatools -Force -SkipPublisherCheck

# Alternative: Use PSResourceGet (no errors!)
Install-PSResource dbatools

Why This Is Happening

dbatools moved from DigiCert to Microsoft Azure Trusted Signing on August 5, 2025 (version 2.5.5+). This is GOOD - it means:

• ✅ No more antivirus false positives
• ✅ Microsoft backs our reputation
• ✅ Better enterprise security trust

You only need -SkipPublisherCheck ONCE for the initial upgrade. After that, you're good!

For Strict Execution Policies (AllSigned/RemoteSigned)

Azure Trusted Signing rotates certificates daily. You'll need to trust each new cert after updates. Automate it:

function Import-Dbatools {
    $moduleBase = (Get-Module dbatools -ListAvailable | Select-Object -First 1).ModuleBase
    $moduleManifest = Join-Path $moduleBase dbatools.psd1
    $cert = (Get-AuthenticodeSignature -FilePath $moduleManifest).SignerCertificate

    if (-not (Test-Path -Path "Cert:\CurrentUser\TrustedPublisher\$($cert.Thumbprint)")) {
        Write-Host "Trusting new dbatools certificate..." -ForegroundColor Yellow
        $store = Get-Item Cert:\CurrentUser\TrustedPublisher
        $store.Open('ReadWrite')
        $store.Add($cert)
        $store.Close()
    }

    Import-Module dbatools
}

Full Details

Read the complete explanation at: https://blog.netnerds.net/2025/08/dbatools-azure-trusted-signing/

Keywords for Search

• dbatools SkipPublisherCheck
• dbatools authenticode issuer error
• dbatools DigiCert Microsoft certificate
• Update-Module dbatools not matching root certificate
• Install-Module dbatools certificate authority error
• PackageManagement Install-Package dbatools error
• dbatools.library SkipPublisherCheck
• PowerShell module certificate mismatch
• dbatools 2.5.5 update error
• dbatools Azure Trusted Signing
• dbatools Microsoft Identity Verification Root Certificate Authority