Create a WinRM HTTPS listener in Orion

11/29/2018 10:28 PM

9/8/2023 3:46 PM

This article describes how to create a WinRM HTTPS listener for Powershell on a remote server.

Server Application Monitor

Execute the following steps on the remote target server that hosts a self-signed certificate to support Orion server polling via a PowerShell monitor. Click here to learn about creating certificates.

1. From the Start menu on the target server, open a Command Prompt by right-clicking and selecting Run as Administrator.
2. Type the following command, replacing parameters with actual values, as explained below:

   winrm create winrm/config/Listener?Address=<IP ADDRESS OF REMOTE SERVER>+Transport=HTTPS @{Hostname=”<NAME OR IP ADDRESS OF REMOTE SERVERr>”;CertificateThumbprint=”<CERTIFICATE THUMBPRINT WITHOUT SPACES>”;Port=”<PORT NUMBER>”}
   
   -- Scripts are not supported under any SolarWinds support program or service.
   -- Scripts are provided AS IS without warranty of any kind. SolarWinds further
   -- disclaims all warranties including, without limitation, any implied warranties
   -- of merchantability or of fitness for a particular purpose. The risk arising
   -- out of the use or performance of the scripts and documentation stays with you.
   -- In no event shall SolarWinds or anyone else involved in the creation,
   -- production, or delivery of the scripts be liable for any damages whatsoever
   -- (including, without limitation, damages for loss of business profits, business
   -- interruption, loss of business information, or other pecuniary loss) arising
   -- out of the use of or inability to use the scripts or documentation.

   Where,
   <IP ADDRESS OF REMOTE SERVER> - To bind the certificate to the Listener, specify the remote server's local IP address (the IP address of the server to be monitored by Orion, not the Orion server itself). Use the wildcard symbol ("*") to allow listening on all available local addresses;
   <NAME OR IP ADDRESS OF REMOTE SERVER> - The Remoting Server's node name or IP address;
   <CERTIFICATE THUMBPRINT WITHOUT SPACES> - Paste the self-signed certificate thumbprint. See Retrieve the Thumbprint of a Certificate (© 2020 Microsoft Corp, available at docs.microsoft.com , obtained on October 29, 2020.)
   <PORT NUMBER> - This is the port number for the Listener. You can specify the default WinRM HTTPS port of 5986.
   For example:

   winrm create winrm/config/Listener?Address=IP:192.168.0.198+Transport=HTTPS @{Hostname="192.168.0.198";CertificateThumbprint="6aa47ed7356fb0f1e3b434850a7bb51ed40b0d3a";Port="5986"}

3. After the command is successfully executed, the output will look similar to the following illustration:
   

See also Use PowerShell in SAM.