Hotfix for Azure Key Vault tests

Author: edwardneal

src/Microsoft.Data.SqlClient/tests/ManualTests/AlwaysEncrypted/AKVTests.cs

@@ -29,7 +29,7 @@ public AKVTest(SQLSetupStrategyAzureKeyVault fixture)
         [ConditionalFact(typeof(DataTestUtility), nameof(DataTestUtility.AreConnStringSetupForAE), nameof(DataTestUtility.IsAKVSetupAvailable))]
         public void TestEncryptDecryptWithAKV()
         {
-            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionStringHGSVBS)
+            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionString)
             {
                 ColumnEncryptionSetting = SqlConnectionColumnEncryptionSetting.Enabled,
                 AttestationProtocol = SqlConnectionAttestationProtocol.NotSpecified,
@@ -70,7 +70,7 @@ It aims to confirm that three consecutive connections will consistently fail wit
         [ConditionalFact(typeof(DataTestUtility), nameof(DataTestUtility.AreConnStringSetupForAE), nameof(DataTestUtility.IsAKVSetupAvailable))]
         public void ForcedColumnDecryptErrorTestShouldFail()
         {
-            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionStringHGSVBS)
+            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionString)
             {
                 ColumnEncryptionSetting = SqlConnectionColumnEncryptionSetting.Enabled,
                 AttestationProtocol = SqlConnectionAttestationProtocol.NotSpecified,
@@ -148,7 +148,7 @@ public void TestRoundTripWithAKVAndCertStoreProvider()
         [ConditionalFact(typeof(DataTestUtility), nameof(DataTestUtility.AreConnStringSetupForAE), nameof(DataTestUtility.IsAKVSetupAvailable))]
         public void TestLocalCekCacheIsScopedToProvider()
         {
-            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionStringHGSVBS)
+            SqlConnectionStringBuilder builder = new(DataTestUtility.TCPConnectionString)
             {
                 ColumnEncryptionSetting = SqlConnectionColumnEncryptionSetting.Enabled,
                 AttestationProtocol = SqlConnectionAttestationProtocol.NotSpecified,

src/Microsoft.Data.SqlClient/tests/tools/Microsoft.Data.SqlClient.TestUtilities/Fixtures/CertificateFixtureBase.cs

@@ -101,7 +101,7 @@ protected static X509Certificate2 CreateCertificate(string subjectName, IEnumera
 {{
     $x509 = PKI\New-SelfSignedCertificate -Subject $subject -TextExtension $sAN -KeyLength 2048 -KeyAlgorithm RSA `
         -CertStoreLocation ""Cert:\CurrentUser\My"" -NotBefore $notBefore -NotAfter $notAfter `
-        -KeyExportPolicy Exportable -HashAlgorithm SHA256
+        -KeyExportPolicy Exportable -HashAlgorithm SHA256 -Provider ""Microsoft Enhanced RSA and AES Cryptographic Provider"" -KeySpec KeyExchange
 
     if ($x509 -eq $null)
     {{ throw ""Certificate was null!"" }}
@@ -166,7 +166,7 @@ exit 1
                 // Process completed successfully if it had an exit code of zero, the command output will be the base64-encoded certificate
                 if (psProcess.ExitCode == 0)
                 {
-                    return new X509Certificate2(Convert.FromBase64String(commandOutput), password);
+                    return new X509Certificate2(Convert.FromBase64String(commandOutput), password, X509KeyStorageFlags.Exportable);
                 }
                 else
                 {