Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

WinRM WEF over HTTPS

$
0
0

Hi All,

I was successfully able to configure WEF over WinRM using a “Source Initiated Subscription” as detailed here

https://docs.microsoft (.) com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription.

However, since forwarding PS data over the network in plain text (default WEF setting is to run over HTTP) is not my cup of tea, I was trying to set up a HTTPS listener as detailed in the “Setting up a source initiated subscription where the event sources are not in the same domain as the event collector computer” section of the document but this didn’t go as expected. I’ll mention that despite the name I am trying to set up HTTPS listener in a domain environment.

I’ve encountered two main problems. I was able to overcome the first one (“Message = Cannot create a WinRM listener on HTTPS because this machine does not have an appropriate certificate. To be used for SSL, a certificate must have a CN matching the hostname, be appropriate for Server Authentication, and not be expired, revoked, or self-signed.”)  and now I’m stuck with the second one – “Message = The function: "HttpSetServiceConfiguration" failed unexpectedly. Error=1312. Error number:  -2147023584 0x80070520 A specified logon session does not exist. It may already have been terminated”.

Have you ever encountered this before? Any suggestions?

Thanks in advance!


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>