diff --git a/examples/helix-basic-aspnetcore/docker/build/dotnetsdk/Dockerfile b/examples/helix-basic-aspnetcore/docker/build/dotnetsdk/Dockerfile
index d11f6f99..cca575ed 100644
--- a/examples/helix-basic-aspnetcore/docker/build/dotnetsdk/Dockerfile
+++ b/examples/helix-basic-aspnetcore/docker/build/dotnetsdk/Dockerfile
@@ -15,7 +15,8 @@ SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPref
 # Ensure updated nuget. Depending on your Windows version, dotnet/framework/sdk:4.8 tag may provide an outdated client.
 # See https://github.com/microsoft/dotnet-framework-docker/blob/1c3dd6638c6b827b81ffb13386b924f6dcdee533/4.8/sdk/windowsservercore-ltsc2019/Dockerfile#L7
 ENV NUGET_VERSION 5.8.0
-RUN Invoke-WebRequest "https://dist.nuget.org/win-x86-commandline/v$env:NUGET_VERSION/nuget.exe" -UseBasicParsing -OutFile "$env:ProgramFiles\NuGet\nuget.exe"
+RUN [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; `
+    Invoke-WebRequest "https://dist.nuget.org/win-x86-commandline/v$env:NUGET_VERSION/nuget.exe" -UseBasicParsing -OutFile "$env:ProgramFiles\NuGet\nuget.exe"
 
 ## Install netcore onto SDK image
 ## https://github.com/dotnet/dotnet-docker/blob/5e9b849a900c69edfe78f6e0f3519009de4ab471/3.1/sdk/nanoserver-1909/amd64/Dockerfile
diff --git a/examples/helix-basic-aspnetcore/init.ps1 b/examples/helix-basic-aspnetcore/init.ps1
index 9793fc37..28bad5f5 100644
--- a/examples/helix-basic-aspnetcore/init.ps1
+++ b/examples/helix-basic-aspnetcore/init.ps1
@@ -98,6 +98,7 @@ try {
         $mkcert = "mkcert"
     } elseif (-not (Test-Path $mkcert)) {
         Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green 
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
         Invoke-WebRequest "https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-windows-amd64.exe" -UseBasicParsing -OutFile mkcert.exe
         if ((Get-FileHash mkcert.exe).Hash -ne "1BE92F598145F61CA67DD9F5C687DFEC17953548D013715FF54067B34D7C3246") {
             Remove-Item mkcert.exe -Force
diff --git a/examples/helix-basic-nextjs/Dockerfile b/examples/helix-basic-nextjs/Dockerfile
index a32ff2cd..5adfbf04 100644
--- a/examples/helix-basic-nextjs/Dockerfile
+++ b/examples/helix-basic-nextjs/Dockerfile
@@ -24,7 +24,8 @@ SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPref
 # Ensure updated nuget. Depending on your Windows version, dotnet/framework/sdk:4.8 tag may provide an outdated client.
 # See https://github.com/microsoft/dotnet-framework-docker/blob/1c3dd6638c6b827b81ffb13386b924f6dcdee533/4.8/sdk/windowsservercore-ltsc2019/Dockerfile#L7
 ENV NUGET_VERSION 5.8.1
-RUN Invoke-WebRequest "https://dist.nuget.org/win-x86-commandline/v$env:NUGET_VERSION/nuget.exe" -UseBasicParsing -OutFile "$env:ProgramFiles\NuGet\nuget.exe"
+RUN [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; `
+    Invoke-WebRequest "https://dist.nuget.org/win-x86-commandline/v$env:NUGET_VERSION/nuget.exe" -UseBasicParsing -OutFile "$env:ProgramFiles\NuGet\nuget.exe"
 
 WORKDIR /build
 
diff --git a/examples/helix-basic-nextjs/init.ps1 b/examples/helix-basic-nextjs/init.ps1
index 1da1d807..0b638fb1 100644
--- a/examples/helix-basic-nextjs/init.ps1
+++ b/examples/helix-basic-nextjs/init.ps1
@@ -67,6 +67,7 @@ try {
         $mkcert = "mkcert"
     } elseif (-not (Test-Path $mkcert)) {
         Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green 
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
         Invoke-WebRequest "https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-windows-amd64.exe" -UseBasicParsing -OutFile mkcert.exe
         if ((Get-FileHash mkcert.exe).Hash -ne "1BE92F598145F61CA67DD9F5C687DFEC17953548D013715FF54067B34D7C3246") {
             Remove-Item mkcert.exe -Force
diff --git a/examples/helix-basic-tds-consolidated/init.ps1 b/examples/helix-basic-tds-consolidated/init.ps1
index a1d6e91a..3d1afb53 100644
--- a/examples/helix-basic-tds-consolidated/init.ps1
+++ b/examples/helix-basic-tds-consolidated/init.ps1
@@ -98,6 +98,7 @@ try {
         $mkcert = "mkcert"
     } elseif (-not (Test-Path $mkcert)) {
         Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green 
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
         Invoke-WebRequest "https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-windows-amd64.exe" -UseBasicParsing -OutFile mkcert.exe
         if ((Get-FileHash mkcert.exe).Hash -ne "1BE92F598145F61CA67DD9F5C687DFEC17953548D013715FF54067B34D7C3246") {
             Remove-Item mkcert.exe -Force
diff --git a/examples/helix-basic-tds/init.ps1 b/examples/helix-basic-tds/init.ps1
index 14ad28ba..83988c26 100644
--- a/examples/helix-basic-tds/init.ps1
+++ b/examples/helix-basic-tds/init.ps1
@@ -97,6 +97,7 @@ try {
         $mkcert = "mkcert"
     } elseif (-not (Test-Path $mkcert)) {
         Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green 
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
         Invoke-WebRequest "https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-windows-amd64.exe" -UseBasicParsing -OutFile mkcert.exe
         if ((Get-FileHash mkcert.exe).Hash -ne "1BE92F598145F61CA67DD9F5C687DFEC17953548D013715FF54067B34D7C3246") {
             Remove-Item mkcert.exe -Force
diff --git a/examples/helix-basic-unicorn/init.ps1 b/examples/helix-basic-unicorn/init.ps1
index 635d9235..74d3006f 100644
--- a/examples/helix-basic-unicorn/init.ps1
+++ b/examples/helix-basic-unicorn/init.ps1
@@ -100,7 +100,8 @@ try {
         # mkcert installed in PATH
         $mkcert = "mkcert"
     } elseif (-not (Test-Path $mkcert)) {
-        Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green 
+        Write-Host "Downloading and installing mkcert certificate tool..." -ForegroundColor Green
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 
         Invoke-WebRequest "https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-windows-amd64.exe" -UseBasicParsing -OutFile mkcert.exe
         if ((Get-FileHash mkcert.exe).Hash -ne "1BE92F598145F61CA67DD9F5C687DFEC17953548D013715FF54067B34D7C3246") {
             Remove-Item mkcert.exe -Force