I would like to use winrm in https.

I'm able to configure it through command : winrm create winrm/config/listener?Address=*+Transport=HTTPS @{Hostname="FQDN";CertificateThumbprint="xxxxxxxxxx";Port="5986"}

but I would like to use command :

winrm quickconfig -transport:HTTPS that give me error :

Cannot create a WinRM listener on HTTPS because this machine does not have an ap
propriate certificate. To be used for SSL, a certificate must have a CN matching
 the hostname, be appropriate for Server Authentication, and not be expired, rev
oked, or self-signed.

instead command :

winrm create winrm/config/listener?Address=*+Transport=HTTPS give me this error

The WS-Management service cannot find the certificate that was requested

I created a CA Root certificate through command : makecert -pe -n "CN=Test Root Authority" -ss my -sr LocalMachine -sky signature -r "Test Root Authority.cer"

I exported with private key and imported under Trusted root authorities with mmc console.

I created a certificate through command : makecert -pe -n "CN=FQDN" -ss my -sr LocalMachine -sky exchange -eku 1.3.6.1.5.5.7.3.1 -in "Test Root Authority" -is MY -ir LocalMachine -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 jtesting.new.cer

Thanks for attention

• Edited by ghghjkgjhkgk Tuesday, July 21, 2015 12:29 PM

Hi,

 WinRM HTTPS requires a local computer "Server Authentication" certificate with a CN matching the hostname, that is not expired, revoked, or self-signed to be installed, please refer the following similar thread Rick.Olsens replay solution first.

WinRM HTTPS Listener Problem with Hostname Property

https://social.technet.microsoft.com/Forums/windowsserver/en-US/cddbef93-1114-4cca-9621-5a506d9b632b/winrm-https-listener-problem-with-hostname-property

Configuring WINRM for HTTPS

https://support.microsoft.com/en-us/kb/2019527

Im glad to be of help to you!