admin center set up

%3CLINGO-SUB%20id%3D%22lingo-sub-1617001%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1617001%22%20slang%3D%22en-US%22%3EHi%2C%20i%20am%20in%20the%20same%20position%20as%20you%20but%20in%20a%20corporate%20production%20environment.%3CBR%20%2F%3EWe%20have%20over%205000%20production%20and%20UAT%20servers%20and%20cannot%20access%20a%20single%20one%20of%20them%20after%20installing%20on%20a%20Server%202019%20production%20server.%3CBR%20%2F%3EI%20hope%20someone%20can%20answer%20both%20our%20questions.%3CBR%20%2F%3E%3CBR%20%2F%3EDavid%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1616308%22%20slang%3D%22en-US%22%3Eadmin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1616308%22%20slang%3D%22en-US%22%3E%3CP%3Ehi%20my%20name%20is%20Eric%2C%20i%20am%20a%20first%20year%20system%20administration%20student%20in%20the%20NL%3CBR%20%2F%3Ei%20have%20run%20into%20a%20problem%20with%20the%20login%20of%20admin%20center%20on%20my%20hobby%20server%20(basically%20an%20old%20desktop%20from%202009%2C%20surprisingly%20running%20windows%20server%202019)%20but%20i'm%20having%20trouble%20getting%20WinRM%20to%20cooperate%2C%20i'm%20not%20sure%20if%20this%20is%20the%20right%20place%20to%20even%20ask%2C%20if%20not%20my%20apologies.%20i%20attached%20a%20file%20with%20the%20error%20i'm%20getting%20when%20trying%20to%20log%20onto%20the%20server%2C%20am%20i%20doing%20something%20wrong%3F%20did%20i%20skip%20a%20step%3F%20i'm%20not%20entirely%20sure%3CBR%20%2F%3E%3CBR%20%2F%3ENote%3A%20this%20is%20a%20clean%20install%20of%20windows%20server%202019%3CBR%20%2F%3ENote%202%3A%20kerberos%20is%20not%20enabled%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EEdit%3A%20i%20have%20done%20some%20more%20digging%20my%20server%20certificate%20is%20according%20to%20Chrome%20unsafe.%3C%2FP%3E%3CP%3Ethere%20is%20a%20DDNS%20name%20registered%20for%20my%20PC%20by%20use%20of%20no%20ip%20(this%20is%20for%20my%20minecraft%20server%2C%20doesn't%20use%20port%20443)%20could%20this%20have%20something%20to%20do%20with%20it%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622586%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622586%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773494%22%20target%3D%22_blank%22%3E%40davidcraig31%3C%2FA%3E%26nbsp%3Bis%20your%20admin%20center%20certificate%20valid%3F%20just%20for%20my%20own%20sanity%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622777%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622777%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773367%22%20target%3D%22_blank%22%3E%40generaal-eric%3C%2FA%3E%26nbsp%3BYeah%2C%20the%20certificate%20is%20issued%20by%20our%20PKI%20server%20and%20is%20valid%20until%202026%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622809%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622809%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773494%22%20target%3D%22_blank%22%3E%40davidcraig31%3C%2FA%3E%26nbsp%3Bi%20dont%20know%20how%20to%20get%20mine%20valid%2C%20i%20made%20one%20my%20self%20using%20IIS%20but%20google%20chrome%20keeps%20complaining%20about%20the%20following%3A%3CBR%20%2F%3EIm%20probably%20overlooking%20something%20but%20a%20little%20pointer%20would%20be%20nice%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622949%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622949%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773367%22%20target%3D%22_blank%22%3E%40generaal-eric%3C%2FA%3Ewhen%20you%20created%20the%20certificate%20did%20you%20install%20it%20in%20the%20correct%20place%20on%20your%20server%20for%20the%20type%20of%20certificate%3F%20i.e%20ours%20are%20in%20%22Personal%20%26gt%3B%20certificates%22%20and%20if%20issued%20to%20a%20full%20domain%20you%20need%20to%20make%20sure%20you%20access%20gateway%20using%20the%20full%20FQDN.%20also%20a%20certificate%20wont%20work%20if%20you%20are%20using%20a%20direct%20IP%20unless%20you%20have%20specified%20this%20in%20the%20SSL%20certificate%20on%20creation.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20did%20you%20update%20WAC%20with%20the%20new%20thumbprint%20of%20your%20certificate%20or%20did%20you%20install%20initially%20using%20that%20certificate%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622962%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622962%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773494%22%20target%3D%22_blank%22%3E%40davidcraig31%3C%2FA%3E%26nbsp%3Bits%20a%20standalone%20server%20no%20domain%20nothing%20around%20it%3CBR%20%2F%3Eaccording%20to%20what%20i%20read%20online%20i%20have%20to%20add%20the%20DDNS%20i%20have%20to%20the%20SAN%26nbsp%3B%3CBR%20%2F%3Ean%20new%20observation%20between%20two%20virtual%20machines%20i%20made%20is%20this%3A%3CBR%20%2F%3Enote%3A%20i%20never%20had%20this%20problem%20in%20the%20past%20this%20just%20became%20i%20thing%2C%20i%20would%20guess%20its%20related%20to%20the%20problem%3CBR%20%2F%3E%3CBR%20%2F%3Eas%20you%20can%20see%20the%20win%20rm%20service%20is%20having%20issues%20again%2C%20this%20time%20between%20two%20virtual%20machines%3CBR%20%2F%3E(dont%20worry%20i%20can%20ping)%20and%20the%20machines%20it%20self%20are%20clean%20standalone%20installs%20of%20windows%20servers%2C%20as%20of%20the%20moment%20of%20writing%20this%2C%20not%202%20hours%20old%3CBR%20%2F%3E%3CBR%20%2F%3E%2Bthe%20fact%20that%20if%20i%20do%20put%20the%20one%20physical%20machine%20i%20have%20in%20a%20domain%2C%20the%20moment%20my%20laptop%20(that%20i%20use%20for%20school%20and%20the%20virtual%20machine%20stuff)%20and%20the%20domain%20goes%20offline%20the%20Minecraft%20server%20has%20a%20mental%20breakdown%20and%20cannot%20verify%20the%20usernames%20of%20players%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1624153%22%20slang%3D%22en-US%22%3ERe%3A%20admin%20center%20set%20up%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1624153%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F773494%22%20target%3D%22_blank%22%3E%40davidcraig31%3C%2FA%3E%26nbsp%3Bfound%20the%20solution%20you%20dont%20want%20to%20run%20winRM%20over%20HTTPS%20only%2C%20you%20want%20to%20use%20http%20and%20https%2C%20fixed%20it%20for%20me%2C%20hope%20it%20fixes%20it%20for%20you%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

hi my name is Eric, i am a first year system administration student in the NL
i have run into a problem with the login of admin center on my hobby server (basically an old desktop from 2009, surprisingly running windows server 2019) but i'm having trouble getting WinRM to cooperate, i'm not sure if this is the right place to even ask, if not my apologies. i attached a file with the error i'm getting when trying to log onto the server, am i doing something wrong? did i skip a step? i'm not entirely sure

Note: this is a clean install of windows server 2019
Note 2: kerberos is not enabled 

Edit: i have done some more digging my server certificate is according to Chrome unsafe.

there is a DDNS name registered for my PC by use of no ip (this is for my minecraft server, doesn't use port 443) could this have something to do with it?

7 Replies
Hi, i am in the same position as you but in a corporate production environment.
We have over 5000 production and UAT servers and cannot access a single one of them after installing on a Server 2019 production server.
I hope someone can answer both our questions.

David

@davidcraig31 is your admin center certificate valid? just for my own sanity

@generaal-eric Yeah, the certificate is issued by our PKI server and is valid until 2026

@davidcraig31 i dont know how to get mine valid, i made one my self using IIS but google chrome keeps complaining about the following:
Im probably overlooking something but a little pointer would be nice :)

 

@generaal-ericwhen you created the certificate did you install it in the correct place on your server for the type of certificate? i.e ours are in "Personal > certificates" and if issued to a full domain you need to make sure you access gateway using the full FQDN. also a certificate wont work if you are using a direct IP unless you have specified this in the SSL certificate on creation. 

 

Also did you update WAC with the new thumbprint of your certificate or did you install initially using that certificate?

@davidcraig31 its a standalone server no domain nothing around it
according to what i read online i have to add the DDNS i have to the SAN 
an new observation between two virtual machines i made is this:
note: i never had this problem in the past this just became i thing, i would guess its related to the problem

as you can see the win rm service is having issues again, this time between two virtual machines
(dont worry i can ping) and the machines it self are clean standalone installs of windows servers, as of the moment of writing this, not 2 hours old

+the fact that if i do put the one physical machine i have in a domain, the moment my laptop (that i use for school and the virtual machine stuff) and the domain goes offline the Minecraft server has a mental breakdown and cannot verify the usernames of players

@davidcraig31 found the solution you dont want to run winRM over HTTPS only, you want to use http and https, fixed it for me, hope it fixes it for you :)