Winrm enable https 5986

From UVOO Tech Wiki
Jump to navigation Jump to search

Steps

Copy Cert

copy cert called myhost.example.com and import pkcs12 pfx on host

enable winrm https port 5986

$HN="myhost.example.com";
winrm delete winrm/config/Listener?Address=*+Transport=HTTPS
$TP=(Get-ChildItem -Path Cert:LocalMachine\MY | where Subject -like "CN=${HN}*").Thumbprint
winrm create winrm/config/Listener?Address=*+Transport=HTTPS "@{Hostname=`"${HN}`"; CertificateThumbprint=`"$TP`"}"
New-NetFirewallRule -DisplayName "ALLOW WinRM HTTPS 5986" -Direction inbound -Profile Any -Action Allow -LocalPort 5986 -Protocol TCP

Connect

enter-pssession -usessl myhost.example.com

Another Way

Set-WSManInstance -ResourceURI winrm/config/Listener -SelectorSet @{Address="*"; Transport="HTTPS"} -ValueSet @{CertificateThumbprint='xxxxx';Hostname='myhost.example.com'}

More

Notes of stuff that seems to not work

winrm quickconfig -transport:https -force
New-NetFirewallRule -DisplayName "ALLOW WinRM HTTPS 5986" -Direction inbound -Profile Any -Action Allow -LocalPort 5986 -Protocol TCP