Install Guide
Installing WinRM
On Windows Server, Windows client operating system, and WinRM 2.0 is installed by default. On Windows Server, WinRM 1.1 is installed
by default.
Certificate Authority Signed Self-Signed Certificate
You need a certificate signed by a CA or a self‑signed certificate (generated using the SelfSSL tool) to install and configure the Remote
Enablement feature on the system.
NOTE: It is recommended that you use a certificate signed by a CA.
Using A Certificate Signed By A CA
To use a certificate signed by a CA:
1. Request a valid CA signed certificate.
2. Create a HTTP listener with the CA signed certificate.
Requesting A Valid CA Signed Certificate
To request a valid CA signed certificate:
1. Click Start > Run.
2. Type mmc and click OK.
3. Click File > Add/Remove Snap-in.
4. Select Certificates, and then click Add.
5. In the Certificates snap-in dialog box, select Computer account, and then click Next.
6. Select Local Computer, and then click Finish.
7. Click Close, and then click OK.
8. On the Console window, expand Certificates (Local Computer) in the left navigation pane.
9. Right-click Personal, select All tasks > Request New Certificate.
10. Click Next.
11. Select the appropriate certificate type, Mostly (Computer), and then click Enroll.
12. Click Finish.
Creating The HTTPS Listener With The Valid CA Signed Certificate
Run the installer and click the link on the prerequisite checker to create the HTTPS listener.
NOTE:
The HTTP listener is enabled by default and listens at port 80.
Configuring User Authorization For WinRM And WMI Servers
To provide access rights to WinRM and WMI services, explicitly add users with the appropriate access levels.
NOTE:
To configure user authorization — For WinRM and WMI Servers, you must login with administrator privileges. -
For Windows Server operating systems, you must login as a built-in Administrator, Domain Administrator, or user who is
a part of Domain Admins and Domain Users group.
NOTE: The administrator is configured by default.
WinRM
To configure user authorization for WinRM servers:
1. Click Start > Run.
2. Type winrm configsddl and click OK.
If you are using WinRM 2.0, type winrm configsddl default.
3. Click Add and add the required users or groups (local/domain) to the list.
14
Preinstallation Setup