Unanswered AllowUnecrypted WinRM Property

  • Wednesday, May 23, 2012 2:30 PM
     
     

    Hi all,

    I am using HyperV.

    I need to understand the configuration of WinRM for using different communication channels and the encryption of the communication. 

    I understand the creation of HTTP/HTTPS listeners. What I don't understand is what is controlled by the AllowUnencrypted property. Docs says:

    ===

    AllowUnencrypted - Allows the client computer to request unencrypted traffic. By default, the client computer requires encrypted network traffic and this setting is False.

    ===

    But what exactly that means, do we forbid usage of HTTP if 'AllowUnencrypted = false'? Obviously not, because I am able to communicate without HTTPS listener. So, obviously we have some kind of encryption that is done for the communication over HTTP. Some more details about what exactly encryption is being done would be helpful.

    What happens if 'AllowUnencrypted = true'? I stumbled upon an article in the web which said that only the SOAP will be unencrypted in this case, but some more details would be helpful.

    Thanks in advance,

    -Stoimen


    Stoimen

All Replies

  • Wednesday, June 27, 2012 7:46 PM
     
     

    We want to set AllowUnencrypted to true.

    On W2K8 we used to be able to run:

    winrm set winrm/config/Client @{AllowUnencrypted = "true"}

    On W2K12 (Beta) we're getting the error:

    Error: Invalid use of command line. Type "winrm -?" for help.

    Many variations of this command have been tried to no avail.

    The "get" command works:

    PS C:\Users\Administrator.ENGSMOKE> winrm get winrm/config/Client
    Client
        NetworkDelayms = 5000
        URLPrefix = wsman
        AllowUnencrypted = false
        Auth
            Basic = true
            Digest = true
            Kerberos = true
            Negotiate = true
            Certificate = true
            CredSSP = false
        DefaultPorts
            HTTP = 5985
            HTTPS = 5986
        TrustedHosts

    Suggestions would be welcomed.