Forum Discussion

Konstantinos N. Chionas's avatar
Konstantinos N. Chionas
Copper Contributor
Oct 15, 2018

Cluster Update asking to enable CredSSP

I installed Windows Admin Center, its great and working fine, but one of the things it advises me to do is to turn off CredSSP on servers, but when I use the Updates link on cluster page, it tells me...
Paul_Westervelt's avatar
Paul_Westervelt
Former Employee
Apr 07, 2019

Jeff Woolslayer 

Do you have a procedure to enable the CredSSP options to allow Windows Admin Center to process cluster updates?

Jeff Woolslayer's avatar
Jeff Woolslayer
Former Employee
Apr 08, 2019

Hi Paul_Westervelt! I see you reached out via email as well. Someone should get back to you on that thread soon. 

 

The gist of it is that WAC should handle all the CredSSP configuration automatically. As a user, you shouldn't have to do anything (other than consent.)

  • oikjn's avatar
    oikjn
    Copper Contributor
    Apr 30, 2019

    Jeff Woolslayer 

     

    I think I"m seeing a similar issue.  credssp is simply not turning on automatically.  I get an error in WAC when I try and do updates or diagnostics stating "The workflow to enable CredSSP has been completed, but there was an error. Exception: This operation was blocked by role based access control settings"

     

    RBAC was off originally, but I tried turning it on (and adding my user to the admin list) and then turned it off, and neither way worked.  I even tried loggined into each server and running  Enable-WSManCredSSP -role server in powershell and that showed that it was enabled, but the updates and diagnostics still came back with the same error.  I"m running v1904 build 1.2.1904.11004 on a windows 2019 server that I"m connecting to with a windows10 desktop and trying to manage a S2D hyperconvered cluster running 2019.

    • galenb's avatar
      galenb
      Former Employee
      Apr 30, 2019

      oikjn 

       

      Can you tell me a little more about your desktop/gateway machine?  There is a local group called "Windows Admin Center CredSSP Admins" -- can you tell me if your identity is a member of this group?  Can you tell me which locale you are using on this machine?  And -- can you run the following command in an elevated PowerShell console on this machine and reply with the results:

       

      Enable-WSManCredSSP - Role Client -DelegateComputer <The FQDN of one of the cluster nodes>

       

      Cheers!

       

      Galen

       

      • Timo_Menger's avatar
        Timo_Menger
        Copper Contributor
        Nov 17, 2020
        Where do I find the local group "Windows Admin Center CredSSP Admins"? It doesn't exist at my gateway server?

Resources