Enable WinRM on Windows VMs to Support Ansible

To allow the Execution Server to run configuration management on a Windows VM, you need to configure the Windows Remote Management (WinRM) service on the App's cloud provider VM. The configuration needs to be included in the VM's image or VM template. However, if the image doesn't include this configuration, you can specify a script that performs this configuration on the deployed VM, as explained below.

Note: In CloudShell 8.0, we provide App Starter Packs that deploy Azure Windows VMs with this configuration. For details, contact Quali Support.

To configure the connection:

  1. In the Windows VM, start the Windows Remote Management service and set the Startup type to Automatic.
  2. Run command-line as administrator.

  3. Run each of the following commands separately (you may need to acknowledge the running of some of these commands in the process):

    winrm quickconfig
winrm set winrm/config/service '@{AllowUnencrypted="true"}'
winrm set winrm/config/service/Auth '@{Basic="true"}'
  4. If the VM is not part of a domain, you need to make sure the deployed VM's newly created network is private. If the network is public, the firewall will not allow WinRM connections through.
    1. Open the Windows Local Security Policy window (secpol.msc in Command-Line) > Network List Manager Policies > Unidentified Networks.
    2. Set Location type to Private.

Related Topics