Winrm https basic auth with pywinrm - Revision history

Busk at 17:45, 14 February 2024

2024-02-14T17:45:46Z

Busk at 17:28, 14 February 2024

2024-02-14T17:28:35Z

Busk: Busk moved page Winrm https basic auth to Winrm https basic auth with pywinrm without leaving a redirect

2024-02-14T17:26:39Z

Busk moved page Winrm https basic auth to Winrm https basic auth with pywinrm without leaving a redirect

Busk at 17:19, 14 February 2024

2024-02-14T17:19:52Z

Busk at 17:19, 14 February 2024

2024-02-14T17:19:20Z

Busk at 17:13, 14 February 2024

2024-02-14T17:13:19Z

Busk at 17:09, 14 February 2024

2024-02-14T17:09:00Z

Busk at 17:02, 14 February 2024

2024-02-14T17:02:55Z

Busk: Created page with "``` # Configure WinRM to use HTTPS and enable basic authentication Enable-PSRemoting -Force -SkipNetworkProfileCheck Set-Item WSMan:\localhost\Service\Auth\Basic -Value $true..."

2024-02-14T05:13:46Z

Created page with "``` # Configure WinRM to use HTTPS and enable basic authentication Enable-PSRemoting -Force -SkipNetworkProfileCheck Set-Item WSMan:\localhost\Service\Auth\Basic -Value $true..."

New page

```
# Configure WinRM to use HTTPS and enable basic authentication
Enable-PSRemoting -Force -SkipNetworkProfileCheck
Set-Item WSMan:\localhost\Service\Auth\Basic -Value $true
Set-Item WSMan:\localhost\Service\AllowUnencrypted -Value $false

# Create a self-signed certificate (replace with a valid certificate in production)
$cert = New-SelfSignedCertificate -DnsName "localhost" -CertStoreLocation cert:\LocalMachine\My
$thumbprint = $cert.Thumbprint

# Configure WinRM listener to use HTTPS and the created certificate
New-Item -Path WSMan:\localhost\Listener -Transport HTTPS -Address * -CertificateThumbPrint $thumbprint -Force

# Restart WinRM service to apply changes
Restart-Service WinRM

```

← Older revision		Revision as of 17:45, 14 February 2024
Line 1:		Line 1:
	# WINRM Simple Example Using HTTPS/TLS & Basic Auth		# WINRM Simple Example Using HTTPS/TLS & Basic Auth
		+	- https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/winrmsecurity?view=powershell-7.4

	Note we are creating self signed certificate called localhost & ignoring TLS cert validation for simplicity in this example. You do not want to do this in production. Since we aren't using encrypted messaging via NTLM/Kerberos we want to make sure AllowUnencrypted is set to false so TLS/HTTPS transport is required		Note we are creating self signed certificate called localhost & ignoring TLS cert validation for simplicity in this example. You do not want to do this in production. Since we aren't using encrypted messaging via NTLM/Kerberos we want to make sure AllowUnencrypted is set to false so TLS/HTTPS transport is required

← Older revision		Revision as of 17:28, 14 February 2024
Line 82:		Line 82:
	cert_key_pem=cert_key_pem,		cert_key_pem=cert_key_pem,
	```		```
		+
		+	# Refs

@@ Line 71: / Line 71: @@
 # Certificate might be something like but haven't got to work
 cert_pem = 'host.crt'
 cert_key_pem = 'host.key'
 ```
                          auth=(username, password),
                          transport='certificate',

@@ Line 68: / Line 68: @@
 result = session.run_ps('hostname')
 print(result.std_out.decode())
 ```

@@ Line 67: / Line 67: @@
 result = session.run_ps('hostname')
-print(result.std_out)
+print(result.std_out.decode())
 ```

← Older revision	Revision as of 17:26, 14 February 2024
(No difference)

@@ Line 5: / Line 5: @@
 ## Simple setup
-###
+### Create myuser and add to Administrators group
 ```
 # Configure WinRM to use HTTPS and enable basic authentication

@@ Line 1: / Line 1: @@
 ```
 # Configure WinRM to use HTTPS and enable basic authentication
@@ Line 15: / Line 22: @@
 Restart-Service WinRM
 ```