windows_winrm.rst (ansible-2.14.0) | : | windows_winrm.rst (ansible-2.14.1rc1) | ||
---|---|---|---|---|
skipping to change at line 117 | skipping to change at line 117 | |||
Certificate authentication is not enabled by default on a Windows host but can | Certificate authentication is not enabled by default on a Windows host but can | |||
be enabled by running the following in PowerShell: | be enabled by running the following in PowerShell: | |||
.. code-block:: powershell | .. code-block:: powershell | |||
Set-Item -Path WSMan:\localhost\Service\Auth\Certificate -Value $true | Set-Item -Path WSMan:\localhost\Service\Auth\Certificate -Value $true | |||
.. Note:: Encrypted private keys cannot be used as the urllib3 library that | .. Note:: Encrypted private keys cannot be used as the urllib3 library that | |||
is used by Ansible for WinRM does not support this functionality. | is used by Ansible for WinRM does not support this functionality. | |||
.. Note:: Certificate authentication does not work with a TLS 1.3 connection. | ||||
.._winrm_certificate_generate: | .._winrm_certificate_generate: | |||
Generate a Certificate | Generate a Certificate | |||
++++++++++++++++++++++ | ++++++++++++++++++++++ | |||
A certificate must be generated before it can be mapped to a local user. | A certificate must be generated before it can be mapped to a local user. | |||
This can be done using one of the following methods: | This can be done using one of the following methods: | |||
* OpenSSL | * OpenSSL | |||
* PowerShell, using the ``New-SelfSignedCertificate`` cmdlet | * PowerShell, using the ``New-SelfSignedCertificate`` cmdlet | |||
End of changes. 1 change blocks. | ||||
0 lines changed or deleted | 2 lines changed or added |