VMTools 13.1.0 PowerShell scripts fails to execute due to signing certificate missing in Trusted Publishers

Products

• VMware vSphere ESXi

Issue/Introduction

• When the PowerShell MachinePolicy GPO is set to Allow only signed scripts (AllSigned) on Windows VM and if the VMTools signer (Broadcom Inc) certificate is not present in the Trusted Publishers certificate store, then VMTools PowerShell scripts fails to execute. 
• Windows Events and VMware Tools logs (if enabled) will show below error message.
  
  Verify that a valid "Broadcom Inc" certificate is present in the Trusted Publishers certificate store. Refer to the VMware Tools Administration Guide for details.

 

Environment

• VMware Tools 13.1.0.

Cause

VMTools PowerShell scripts are digitally signed using 'Broadcom Inc' certificate and the execution fails if this certificate is missing in Trusted Publishers.

Resolution

Add the certificate to the Trusted Publishers by following below steps:

1. Right click on the VMware Tools PowerShell script and open Properties.
2. Select Digital Signatures and click on Details
3. Select View Certificate in the Digital Certificate Details
4. Click Install Certificate and select Local Machine.
5. Select Place all certificates in the following store and click on Browse
6. Select Trusted Publishers and Click Next followed by Finish.

Refer to the VMware Tools Administration Guide for more details on adding the Certificate to Trusted Publishers.