Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save potatoqualitee/db556f5cc00759df90fbb284513b0c32 to your computer and use it in GitHub Desktop.
Save potatoqualitee/db556f5cc00759df90fbb284513b0c32 to your computer and use it in GitHub Desktop.
Fix: dbatools Update-Module Install-Module SkipPublisherCheck Error (August 2025)

Fix: dbatools Update-Module Install-Module SkipPublisherCheck Error (August 2025)

The Error You're Seeing

PackageManagement\Install-Package : Authenticode issuer 'CN=dbatools, O=dbatools,
L=Vienna, S=Virginia, C=US' of the new module 'dbatools' with version '2.5.5' from
root certificate authority 'CN=Microsoft Identity Verification Root Certificate
Authority 2020, O=Microsoft Corporation, C=US' is not matching with the authenticode
issuer 'CN=dbatools, O=dbatools, L=Vienna, S=Virginia, C=US' of the previously-installed
module 'dbatools' with version '2.5.1' from root certificate authority 'CN=DigiCert
Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US'. If you still want to
install or update, use -SkipPublisherCheck parameter.

Or similar error for dbatools.library.

Quick Fix

# Fix for Install-Module error, use even when you're updating
Install-Module dbatools -Force -SkipPublisherCheck

# Alternative: Use PSResourceGet (no errors!)
Install-PSResource dbatools

Why This Is Happening

dbatools moved from DigiCert to Microsoft Azure Trusted Signing on August 5, 2025 (version 2.5.5+). This is GOOD - it means:

  • ✅ No more antivirus false positives
  • ✅ Microsoft backs our reputation
  • ✅ Better enterprise security trust

You only need -SkipPublisherCheck ONCE for the initial upgrade. After that, you're good!

For Strict Execution Policies (AllSigned/RemoteSigned)

Azure Trusted Signing rotates certificates daily. You'll need to trust each new cert after updates. Automate it:

function Import-Dbatools {
    $moduleBase = (Get-Module dbatools -ListAvailable | Select-Object -First 1).ModuleBase
    $moduleManifest = Join-Path $moduleBase dbatools.psd1
    $cert = (Get-AuthenticodeSignature -FilePath $moduleManifest).SignerCertificate

    if (-not (Test-Path -Path "Cert:\CurrentUser\TrustedPublisher\$($cert.Thumbprint)")) {
        Write-Host "Trusting new dbatools certificate..." -ForegroundColor Yellow
        $store = Get-Item Cert:\CurrentUser\TrustedPublisher
        $store.Open('ReadWrite')
        $store.Add($cert)
        $store.Close()
    }

    Import-Module dbatools
}

Full Details

Read the complete explanation at: https://blog.netnerds.net/2025/08/dbatools-azure-trusted-signing/

Keywords for Search

  • dbatools SkipPublisherCheck
  • dbatools authenticode issuer error
  • dbatools DigiCert Microsoft certificate
  • Update-Module dbatools not matching root certificate
  • Install-Module dbatools certificate authority error
  • PackageManagement Install-Package dbatools error
  • dbatools.library SkipPublisherCheck
  • PowerShell module certificate mismatch
  • dbatools 2.5.5 update error
  • dbatools Azure Trusted Signing
  • dbatools Microsoft Identity Verification Root Certificate Authority
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment