Install Guide

• Windows Remote Management (WinRM)

• CA/Self-Signed Certicate

• WinRM HTTPS Listener Port

• Authorization for WinRM and Windows Management Instrumentation (WMI) Servers

Installing WinRM

On Windows Server, Windows client operating system, and WinRM 2.0 is installed by default. On Windows Server, WinRM 1.1 is

installed by default.

Certicate Authority Signed Self-Signed Certicate

You need a certicate signed by a CA or a self‑signed certicate (generated using the SelfSSL tool) to install and congure the

Remote Enablement feature on the system.

NOTE: It is recommended that you use a certicate signed by a CA.

Using A Certicate Signed By A CA

To use a certicate signed by a CA:

1. Request a valid CA signed certicate.

2. Create a HTTP listener with the CA signed certicate.

Requesting A Valid CA Signed Certicate

To request a valid CA signed certicate:

1. Click Start → Run.

2. Type mmc and click OK.

3. Click File → Add/Remove Snap-in.

4. Select Certicates, and then click Add.

5. In the Certicates snap-in dialog box, select Computer account, and then click Next.

6. Select Local Computer, and then click Finish.

7. Click Close, and then click OK.

8. On the Console window, expand Certicates (Local Computer) in the left navigation pane.

9. Right-click Personal, select All tasks → Request New Certicate.

10. Click Next.

11. Select the appropriate certicate type, Mostly (Computer), and then click Enroll.

12. Click Finish.

Creating The HTTPS Listener With The Valid CA Signed Certicate

Run the installer and click the link on the prerequisite checker to create the HTTPS listener.

NOTE: The HTTP listener is enabled by default and listens at port 80.

Conguring User Authorization For WinRM And WMI Servers

To provide access rights to WinRM and WMI services, explicitly add users with the appropriate access levels.

NOTE: To congure user authorization — For WinRM and WMI Servers, you must login with administrator privileges. -

For Windows Server operating systems, you must login as a built-in Administrator, Domain Administrator, or user who is a

part of Domain Admins and Domain Users group.

NOTE: The administrator is congured by default.

WinRM

To congure user authorization for WinRM servers:

1. Click Start → Run.

2. Type winrm configsddl and click OK.