jol

Today PowerShell Universal allows scripts to be executed through the Devolutions Agent.

However, when scripts depend on custom or third-party PowerShell modules, administrators must manually ensure that all required modules are installed on every endpoint where the agent executes.

It would be very beneficial to have native support for automatic module deployment and version management between PowerShell Universal and Devolutions Agents.

Proposed Solution

Add a capability in PowerShell Universal to associate one or more modules from the repository's Modules folder with a script as Required Modules.

Script Configuration

Within a PSU script, provide a configuration option such as:

Required Modules:

- Az.Accounts (2.17.0)

- VMware.PowerCLI (13.3.0)

- CustomCompanyModule (1.5.2)

The modules would be linked directly from the PSU repository's Modules directory.

Agent Execution Workflow

When a script is executed through a Devolutions Agent:

1. PSU checks the list of required modules for the script.

2. The agent verifies whether each module exists locally in: C:\Windows\SystemTemp\PowerShellUniversal\Repository\Modules

3. For each required module:

   • If the module does not exist, copy it from PSU to the agent.

   • If the module exists but the version is older than the required version, update it.

   • If the module exists and the version matches or is newer, no action is required.

4. Once all module requirements are satisfied, execute the script.

Benefits

• Eliminates manual module management on agent systems.

• Ensures script portability across all agents.

• Reduces script failures caused by missing modules.

• Guarantees version consistency between PSU and agents.

Thanks for the update i will make a feature request on it

Hi

i have now tested the part with secrets and that works by adding it as a pscredential object thanks :)

about the modules is that something are are working on a fix for? or are there any way to get required modules transferred from PSU module folder to the remote agent?

Hi

I'm currently running PowerShell Universal 2026.3.2.0 together with Devolutions Agent 2026.3.1 and I'm having some issues when executing scripts remotely through the agent.

Issue 1: PSU Modules Not Copied to Remote Server

The scripts execute on the remote machine, but none of the modules from the PSU repository appear to be copied to the target server.

On the remote host, the following directory is empty:

Plain Text

C:\Windows\SystemTemp\PowerShellUniversal\Repository\Modules

As a result, any script that depends on repository modules fails with errors such as:

The specified module 'ModuleName' was not loaded because no valid module file was found in any module directory.

Questions

Is module synchronization to the remote execution host expected to happen automatically?

Does the Devolutions Agent only transfer the script itself and not the PSU repository modules?

Is there any additional configuration required to make PSU modules available during remote execution?

Issue 2: PSU Secrets Not Available During Remote Execution

The same scripts run successfully when executed locally on the PSU server, but when executed remotely through the Devolutions Agent, secrets are not found.

The error returned is:

PSU secret 'SecretName' not found. Create it under Secrets in the PSU admin portal.

Questions

Are PSU Secrets expected to be available when scripts are executed through a remote Devolutions Agent?

Does the agent have access to PSU Secret Management, or must secrets be retrieved differently in remote execution scenarios?

Is additional configuration required to allow access to PSU Secrets from remote agents?

Environment

PowerShell Universal: 2026.3.2.0

Devolutions Agent: 2026.3.1

PSU deployed in High Availability (HA) configuration with 2 Windows IIS nodes

PSU repository synchronized through Git

PSU nodes are load balanced behind a NetScaler ADC

Remote execution via Devolutions Agent

Repository modules are stored in the Git-synchronized PSU repository

Any news about this function.

Hi

after upgrading to 2026.3.0 are my api endpoints there are using internal commands like get-psujob or invoke-psuscript started failing with this error

Status(StatusCode="Unavailable", Detail="failed to connect to all addresses", DebugException="Grpc.Core.Internal.CoreErrorDetailException: {"created":"@1789719790.110000000","description":"Failed to pick subchannel","file":"..\..\..\src\core\ext\filters\client_channel\client_channel.cc","file_line":3218,"referenced_errors":[{"created":"@1789719790.110000000","description":"failed to connect to all addresses","file":"..\..\..\src\core\lib\transport\error_utils.cc","file_line":165,"grpc_status":14}]}")

my set up is 2 PSU Servers running on IIS with a Netscaler LB in front

Hi

i will be nice if modules installed from galleries also is synced when running a HA Setup with multiple PSU Servers

right now i need to ensure i gets on each PSU server and installing the modules

because if i do it from the web interface its only works on the instance i was connected to at install.

best regards

Jacob

Hi Adam thanks for the quick response, I will test that

Hi

i have created 2 PSU Servers with a SQL Database backend

¨we have put a netscaler in front for LB and what to use the url https://MYURL/api/v1/status to check if the servers is up and running but its always gives me a return code 503 and if i browses the api site i gets this "One or more endpoints are not healthy."

i cant see whats wrong im running version 2026.2.4 and its hosted on windows with a IIS

Perfect I look forward to test that :-)

It will be nice to search in the gateway list when selecting a devolutions gateway on a entry we have 90 gateways so its a lot to look in to find the right gateway, So a dorpdown with search options will be nice to have.

Hi

we are desingning a new structure in our RDM Setup and what to made some customer fields like "CustomerCode" and then it should be posibel to write the customer code in the navigation filter bar and get the customer folder.

we are using windows certificate store but the reason for the config update is that we have change from a star certificate to a host specific certificate so the name should be updated in the config

and today the * cert was exspired and all the gateways we not have restarted after config update was failing on the certificate and needed to be restarted.

right now i hat a situation where it has been nice i havde change the certificate on all our gateways to a new one with a new name so the agents should restart to read the new config

here will it be nice with the option to schedule a restart when no one is connected to the gateway.

We have solved this by using win-acme to renew a lets encrypt cert automatically on all the gateways

It could be a nice function in the devolutions server interface to get the possibility to restart the gateway service and also schedule a restart to when no useres is connected like when doing a update of the gateway.

It will be nice on pam/jit accounts to get the possibility in RDM to extend a checkout if fx a technician have check out the account for 4 hours and the task is taking longer then it sould be possible to extend the check out so the account is not deleted in the AD

and also it will be nice with the possibility to have a counter or possibility to see when auto check in will happen.

Yes we have a public Wildcard certificate that we are installing when setting up a gateway but here the most ignoring thing with using the cert store is that you have to give network service read access to the private key

But yes a way to push out a new cert from central place.

Hi We are a MSP that are using the DVLS GW To connect to our customers enviroment

The GW is running on a windows server in the Customer domain but we use a central dvls Server to manage all our customers from.

today we are using the Windows Certificate store on the GW Server to store our public * certificate for the GW.

Best regards

Jacob

Hi

We have 85 gateways running and we have our own SSL Certificate on all the gateways to support the HTTPS, it will be nice with a function to rollout a new cert directly from the Devolution server interface also now SSL Certs life time is getting shorter and shorter its a big job to go to all gateways and replace the cert each time is should be renewed.

Hello,

Thank you for your request. You are right, it would be useful to show only gateways that could be used and remove all without permission. I'm creating a ticket and will add it to our backlog. We will post here once we have an update.

Best regards,

@François Dubois

Any news?

Hi jol,

Thank you for your feedback!

We understand the need to automate the creation of JIT accounts using New-DSPamAccount, especially when managing a large number of users across multiple customers. This is a valuable suggestion, and we will definitely consider adding support for creating JIT accounts directly through the PowerShell module.

That said, this is not something we’ll be able to implement in the short term. However, we’ve added it to our roadmap and will keep you updated on our progress as things evolve.

If you have any additional details or use cases you’d like to share, feel free to let us know — it helps us shape the feature more effectively.

Best regards,

Maxime

@Maxime Bernier

Hi do you have some plans for this?

HI

simliere with the uptions to update devolutions gateway from the DVLS portal will it be nice if the devolutions agent is autoupdating og that its posibel from the DVLS portal and posibel to see version status

an nother good thing will be the posibility to control the Agent from the DVLS so its posible to enable the functions on the agent that way ex enable DVLS GW update function with out to go to the server and update the config ini file

Hi

new-DSPamAccount are missing the function to create a account as a JIT Account

we have X number of users there will need there own JIT Account on X many customers so it will be nice if we can automate the process by creating the Account and add the account to the JIT privilege sets for the provider automatically with the powershell module.

When assigning a devolutions gw to a vault, it wuild be nice if the list was filtered so it only shows the Gateways there has permisions to be used in the selected vault

to day the list just shows all gateways in the system