AllowUnecrypted WinRM Property
-
Wednesday, May 23, 2012 2:30 PM
Hi all,
I am using HyperV.
I need to understand the configuration of WinRM for using different communication channels and the encryption of the communication.
I understand the creation of HTTP/HTTPS listeners. What I don't understand is what is controlled by the AllowUnencrypted property. Docs says:
===
AllowUnencrypted - Allows the client computer to request unencrypted traffic. By default, the client computer requires encrypted network traffic and this setting is False.
===
But what exactly that means, do we forbid usage of HTTP if 'AllowUnencrypted = false'? Obviously not, because I am able to communicate without HTTPS listener. So, obviously we have some kind of encryption that is done for the communication over HTTP. Some more details about what exactly encryption is being done would be helpful.
What happens if 'AllowUnencrypted = true'? I stumbled upon an article in the web which said that only the SOAP will be unencrypted in this case, but some more details would be helpful.
Thanks in advance,
-Stoimen
Stoimen
All Replies
-
Wednesday, June 27, 2012 7:46 PM
We want to set AllowUnencrypted to true.
On W2K8 we used to be able to run:
winrm set winrm/config/Client @{AllowUnencrypted = "true"}
On W2K12 (Beta) we're getting the error:
Error: Invalid use of command line. Type "winrm -?" for help.
Many variations of this command have been tried to no avail.
The "get" command works:
PS C:\Users\Administrator.ENGSMOKE> winrm get winrm/config/Client
Client
NetworkDelayms = 5000
URLPrefix = wsman
AllowUnencrypted = false
Auth
Basic = true
Digest = true
Kerberos = true
Negotiate = true
Certificate = true
CredSSP = false
DefaultPorts
HTTP = 5985
HTTPS = 5986
TrustedHostsSuggestions would be welcomed.

