Forum Discussion
Windows Admin Center: Revert "Use WinRM over HTTPS only" setting
tobor88 What's kind of hilarious (the sad kind) is that when attempting to browse to the URL you provided, I got the following error "btps-secpack.com uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH" on Chrome and on Firefox "SSL_ERROR_NO_CYPHER_OVERLAP". While I agree that https is a good thing in general, to highlight the mess that is WinRM with https, you have to use fqdn's for your computer names else you'll get "The SSL certificate contains a common name (CN) that does not match the hostname" and in WAC 2110, I was getting the "SSL Certificate could not be checked for revocation" using standard machine certs that they get from ADCS despite the fact that both http and ldap distribution points were valid and allowed the crl to be downloaded. Coupled with the fact that there is no standard firewall rule for WinRM over https, nor a way to enable WinRM over https via GPO easily, instead requiring a "winrm quickconfig -transport:https" to be run via a script is really just a big pile of disappoint in general and its almost 2022. So back to kerberos and standard WinRM. At the least, I can confirm that the the best response at the top does work though, the magic needed to undo the "https only" option is: Set-ItemProperty -path "hklm:\SOFTWARE\Microsoft\ServerManagementGateway" -name WinRMHTTPS -value 0
https://btpssecpack.osbornepro.com/en/latest/#configure-winrm-over-https
That is just not me, to each his own