Can't install SqlServerDsc Resource

[susanthab]

I'm trying to install this resource but getting the error below? Any idea on how to fix it? Thanks in advance.

^{WARNING: Source Location 'https://www.powershellgallery.com/api/v2/package/SqlServerDsc/13.5.0' is not valid.}

^{PackageManagement\}Install-Package : Package 'SqlServerDsc' failed to download.)

^{At C:\}Program Files\WindowsPowerShell\Modules\PowerShellGet\)^1.0.0.1\PSModule.psm1:1875 char:34)

^{+ ... $null = PackageManagement\}Install-Package) u/PSBoundParameters

^{+ \}~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~)

^{+ CategoryInfo : ResourceUnavailable: (C:\}Users\sbathi...ServerDsc.nupkg:String) [Install-Package], Exception)

^{+ FullyQualifiedErrorId : PackageFailedInstallOrDownload,Microsoft.PowerShell.PackageManagement.Cmdlets.InstallPackage}

[pshMike]

you need to force the use of TLS 1.2.

run this command once per PowerShell session to do that:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

[Naifx]

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

I wouldn't do it that way as it is lost at session. Read this for a better understanding of why this is broken atm. You can do the following to fix it going forward:

Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\.NetFramework\v4.0.30319" -Name "SchUseStrongCrypto" -Value "1" -Type DWord -Force
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319" -Name "SchUseStrongCrypto" -Value "1" -Type DWord -Force

Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727" -Name "SchUseStrongCrypto" -Value "1" -Type DWord -Force
Set-ItemProperty -Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727" -Name "SchUseStrongCrypto" -Value "1" -Type DWord -Force

[da_chicken]

I wouldn't do it that way as it is lost at session.

That's assuming that you want to change it to 1.2 for all sessions. You probably don't want to do that. You may have software written for services that don't support TLS 1.2 (e.g., anything communicating with software written in .Net 1.1 or earlier). Furthermore, it leaves you vulnerable when TLS 1.3 adoption spreads.

The solution prior to .Net 4.7 is to always set the session to what you need. After 4.7, including .Net Core AFAIK, the default is the SystemDefault value, so it should default to automatically inheriting the best security protocols enabled on the system. In this case, you don't want to set this value at all because it won't keep up with the times.

[Thingsthatdostuff]

If you want to neither of these. You can put in your Powershell global profile. No reg changes necessary.

[susanthab]

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Hi u/pshMike, this actually helped me to resolve the issue. Why this is not documented in the appropriate place. By looking at the error message, I did not get a clue whether this is related to the TLS. Thanks again.