如何信任CA衍生的Powershell中的证书

Question

i want to workaround this massage:

    Do you want to run software from this untrusted publisher?
File Z:\temp.ps1 is published by CN="NAME", DC=Domain, DC=DE and is not trusted on your system. Only run scripts from
trusted publishers.

The ExecutionPolicy of the Powershell is AllSigned. The Certificate is derived of a CA.cert, which is actually in the trusted ca root cert store. This should be enaugh to trust my sining-cert ?! But on the first run of a singed script i got this question. So without adding every derived singing-cert per GPO or whaterver to every computer, how to force to accept derived certs?

Answer 1

The thing with code signing is, you need to import the certificate used for the signature at to your local "trusted publisher" store, to get rid of the warning message.

You can do this with Import-Certificate or prefferebale via GPO, if you're in a domain environment.