Invoke-AzVMCommand in Cloud Shell error error:1416F086:SSL

Question

Invoke-AzVMCommand in Cloud Shell error error:1416F086:SSL

Patrick Brangan 21

Hi,

I'm working in Cloud Shell and I'm trying to use the Invoke-AzVMCommand to view services running on a test VM.

I've done the following:

Enable-AzVMPSRemoting -Name web02 -ResourceGroupName PB-RG-Training01 -Protocol https -OsType Windows

$u = 'test'
$p = ConvertTo-SecureString '********' -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential ($u, $p)

I then run this command:

Invoke-AzVMCommand -Name web02 -ResourceGroupName PB-RG-Training01 -ScriptBlock {get-service win*} -Credential $cred

And this is the response I get:

OpenError: /usr/local/share/powershell/Modules/PSCloudShellUtility/PSCloudShellUtility.psm1:1112
Line |
1112 | Invoke-Command @invokeCommandParams -ErrorAction Stop
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| [13.79.4.200] Connecting to remote server 13.79.4.200 failed
| with the following error message : error:1416F086:SSL
| routines:tls_process_server_certificate:certificate verify
| failed For more information, see the
| about_Remote_Troubleshooting Help topic.

I've checked the NSG and I can see the winrm rule in there. I can RDP to the server etc. I turned off the Windows firewall but this made no difference.

Any help would be really appreciated.

Thanks,

Paddy

Anonymous

2021-01-18T08:44:27.157+00:00

hi

It seems related with the certificate, did you upload the suitable certificate for your deployment?

Best
Karlie
Patrick Brangan 21 Reputation points

2021-01-18T14:47:56.707+00:00

Hi Karlie

Thanks for getting back to me. I'm trying to access a newly create VM from the Azure cloud shell (PowerShell). I'm just trying to run some PS commands against this new VM. I've allowed winrm over HTTPS on the VM. Do I need to store the self signed cert somewhere and reference this when trying to invoke a command on the VM?

All the articles I've read don't mention anything about this i.e. it should just work once you've run this command:

Enable-AzVMPSRemoting -Name weba -ResourceGroupName Test-RG -Protocol https -OsType Windows

Not sure why i'm getting an SSL error?

Thanks,

Paddy
GregP 1 Reputation point

2021-04-22T13:23:39.703+00:00

Hi Paddy,

Were you ever able to figure out the problem with this? I am dealing with the same issue and I cannot find any documentation in regards to the certificate. Thanks!

Greg
Patrick Brangan 21 Reputation points

2021-05-12T10:05:58.34+00:00

Hi Greg,

Yes, I logged case with MS in the end and it was a known bug:

Here's the workaround:

I have an update from our SMEs and PG, they have acknowledged the issue and will be updating the public documents with the suggested solution in an upcoming release.

I would suggest you to execute the following commands In CloudShell post which you can try the Enter-AzVM or Invoke-AzVMCommand.

Install-module pswsman

Disable-WSManCertVerification -All

While we need to run the install-module command only once, you will need to run the ‘Disable-WSManCertVerification -All’ during every session.