powershell command Add-SqlAzureAuthenticationContext -Interactive throws an exception

Question

Add-SqlAzureAuthenticationContext : The type initializer for
'Microsoft.SqlServer.Management.AlwaysEncrypted.Types.AlwaysEncryptedManager' threw an exception.
At line:1 char:1

• Add-SqlAzureAuthenticationContext -Interactive
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : InvalidArgument: (:) [Add-SqlAzureAuthenticationContext], TypeInitializationException
• FullyQualifiedErrorId : AzureAuthError,Microsoft.SqlServer.Management.PowerShell.AlwaysEncrypted.AddSqlAzureAuth
  enticationContext

Answer 1

I found the problem: .NET 4.7.0.02053. After upgrading to v 4.7.03062 I was able to authenticate to Azure via PowerShell

Answer 2

.NET installed: 4.7.0.02053 as well v2 and 3

Answer 3

These were first steps in provision of keys with role separation (Secure Admin part) per

https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/configure-always-encrypted-keys-using-powershell?view=sql-server-ver15

Answer 4

Yes, I am running PS in admin mode:
PS version 5.1.14393.4402
SqlServer Module version 21.1.18245

Commands which were entered:

Import-Module "SqlServer"

$CmkSettings = New-SqlCertificateStoreColumnMasterKeySettings -CertificateStoreLocation -KeyUrl “https://kv-busa01.vault.azure.net:443/keys/CMK002/cd4d8430d9ca445593b7d96e19d56e17”

Add-SqlAzureAuthenticationContext -Interactive

Answer 5

Please verify that you have the right version of the .NET framework installed and that you've imported the SqlServer module (running as administrator)

Import-Module "SqlServer"

It could also be that there are some dependencies or files not loading when using 'Microsoft.SqlServer.Management.AlwaysEncrypted.Types.AlwaysEncryptedManager'

If so, it would be helpful if you shared the code that you used to configure "always encrypted."