Configure WinRM over HTTPS With SSL Certificate using Group Policy

This is a step by step video on how to Configure WinRM over HTTPS With SSL Certificate using Group Policy in Windows Server 2019.

1: Create custom Certificate Template for WinRM
2: Create Group Policy Object:
3: Define GPO setting for Certificate Auto-Enrollment.
4: Define GPO setting to create Firewall rule.
5: Define GPO setting to set WinRM service mode to Automatic
6: Use Group Policy preference to Enable WinRM over HTTPS using scheduled tasks.

How to Install and Configure AD CS on Windows Server 2019:

[frackamaduk]

Hands down after spending an entire day figuring this out, your 17 minute video solved nearly every question I have about this thing. :D Now to get it to work with Windows Admin Center.

[NerdOllie]

This is one of the best tutorials out there for WinRM HTTPS enablement with an enterprise CA. Thanks for the time you put into this video!

[davidpokorny]

I did exactly all as in your video and it worked, thx (I already had CA 2-tier infra )

[FranzGuerrero]

Hello Sir. Great video, step by step detailed explanation con figuring the task. I followed your lab, and I was able to do it.

[gertthoonen]

Good job! I learned a lot from your movies. Highly appreciated 🙏

[ronirohr]

Great tutorial! One question - what happens to winrm/https when the certificate lifetime expires? With auto-enroll I know it will enroll for a new certificate, but will winrm continue to use the thumbprint of the old certificate? Or will the startup script configured through gpo use the latest most valid certificate? Thanks.

[miguelfna]

Hi, greate tutorial, but i'm havin an issue when i try to add a cluster to the admincenter console "The SSL certificate contains a common name (CN) that does not match the hostname", I believe this happens because when the certificate is issued it gets the hostname and not the cluster name, my point is, is it possible somehow to add the cluster name, when a node is part of a failover cluster? thanks

[openmch]

Good video, however you don't tell which certificate template is used for auto enrolment and where to configure this in GPO policy.

[johnmarques]

how is renewal handled in this scenario. So when the certificates Comes for renewal with autoenrollment will the WINRM binding get rebound to the new Certificate?

[AnkitSharma-lukc]

How to change the certificate on winrm over https

[waseemahmed]

Brother, if we don't have Certificate Authority Server in our domain, then how can make it possible. is there any other way, if yes can you share it.

[gurpk]

bhai good video.. Par need to know "T" ko end me Zor deke kyu bolte ho...