Forum Discussion

Konstantinos N. Chionas's avatar
Konstantinos N. Chionas
Copper Contributor
Oct 15, 2018

Cluster Update asking to enable CredSSP

I installed Windows Admin Center, its great and working fine, but one of the things it advises me to do is to turn off CredSSP on servers, but when I use the Updates link on cluster page, it tells me...
galenb's avatar
galenb
Former Employee
Aug 16, 2019

Haribo 

 

I need more info about your gateway setup...

 

Desktop or service mode?

 

What is the execution policy of you gateway machine?  RemoteSigned. AllSigned, etc...

 

Are your connections FQDN or IP addresses?

 

TIA!

 

Galen

Haribo's avatar
Haribo
Copper Contributor
Aug 19, 2019

galenb running in service mode on one of the cluster nodes. ExecutionPolicy was not changed from what it is by default. Connections were FQDN.

  • galenb's avatar
    galenb
    Former Employee
    Aug 21, 2019

    Haribo 

     

    Thanks for confirming service mode.  We are currently changing how the JEA endpoint that we use to configure CredSSP client on the gateway is configured to fix the issues reported.  One of the design goals was to not require that every user of the Windows Admin Center needed to be an administrator of the gateway host server to configure CredSSP.

     

    Is it possible to use desktop mode until the service mode fixes are available?  Desktop mode seems to be working more reliably...  If you try desktop mode and have problems please let me know.