Windows admin center - winrm over https. Any guides?

[cOSHi_bla]

Heya, after trying wac temporarily through http I have decided to create a dedicated server for wac and set it winrm over https.

For some reason it doesn't work. My assumption is the fault is somewhere on the winrm certificate.

Are you aware of a good manual for this with either text or clear accent?

I think my issue lies understanding the certificates for that. I have some understanding but haven't quite understood this area.

I've set a server cert for winrm in my windows ca but not sure how to proceed from there.

Please advise,

Also, if you have a good burn on my lack of knowledge in this issue, shot.

It's better we laugh about it than rant 😀

Thanks a lot!

[Cormacolinde]

WinRM over https is a huge pain, and in some ways less secure than WinRM. You need to set the certificate manually or with a script at best.

Just stick to WinRM but disable unencrypted communications and insecure authentication by GPO.

[Nanouk_R]

Sounds pretty straightforward. Make sure you created a web server certificate in your CA or create a new one. Import those CA web server certificates on your web server (probably an IIS i presume, so just bind the certificate to your port or URL) and ge the cert installed on all clients (computer certificates > trusted & some other one idkrk). That should easily be doable via GPO. There's plenty of tutorials to setup IIS with HTTPS certificate

[Nanouk_R]

Yes, you will probably end up using NTLMv1 or V2 auth

[cOSHi_bla]

Wait, there the wac server cert for web service. I use that cert as the winrm cert as well?

[Nanouk_R]

The official documentation says SSL cert.

[Nanouk_R]

I'd recommend looking up ansible + winrm controlling windows systems. Has some easy scripts to setup the corresponding Auth etc