Return
-
Title
When attempting to search in the Active Roles Web Interface the following error is encountered "Create Powershell Session is failed using OAuth Create Powershell Session is failed using OAuth" -
Description
When attempting to search in the Active Roles Web Interface the following error is encountered "Create Powershell Session is failed using OAuth Create Powershell Session is failed using OAuth."
The following error is seen.
-
Cause
There are three reasons why this error may be seen.- The Azure Powershell cmdlets version is higher or lower than the recommended version specified in the Active Roles Release Notes. This is version specific and is only tested with specific versions. See the Release Notes System Requirements.
- There could be multiple versions of Azure Powershell cmdlets installed.
- An older version of TLS is being used on the Active Roles server. TLS 1.2 is currently the supported version and versions 1.1 and 1.0 should be disabled properly. Alternatively, .NET defaults are not respecting the Windows Operating system settings. Configure the registry keys noted here in order to change .NET default behaviour.
-
Resolution
SOLUTION
Note: The ServiceAccountName can also be a user account if it performed the installation.
1) Verify if there are multiple versions of Azure Powershell installed in the following locations on the Active Roles Server:
C:\Program Files\WindowsPowerShell\Modules\Az.Accounts
C:\Users\ServiceAccountName\Documents\WindowsPowerShell\Modules\Az.Accounts
2) Confirm the TLS version being used if it is version 1.0, or 1.1, and verify in the Windows Event Viewer logs for errors related to this issue on the Active Roles Server. For more information on disabling TLS contact Microsoft if you are concerned about how to disable older versions.
Enable Schannel event logging in Windows and Windows Server visit Microsoft's website.