# Ansible authentication with windows by using GoDaddy or third party certificates

**URL:** <https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [January 28, 2021, 7:26pm UTC](https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530 "2021-01-28T19:26:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![karthik\_kumar1](https://avatars.discourse-cdn.com/v4/letter/k/22d042/32.png) [@karthik\_kumar1](https://forum.ansible.com/u/karthik_kumar1)\
**Post date:** [January 28, 2021, 7:26pm UTC](https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530/1 "2021-01-28T19:26:04Z")

</div>

Hi,

Need help on setting up authentication between ansible and windows by using GoDaddy certificates or any third party instead of Openssl or SelfSigned certificate.

I have tried many ways but its not working. i was able to import certificate to windows but when I was trying to map certificate with local user its not able to find thumbprint of imported certificate. so please someone help me to resolve this.

earlier i have tried with basic and openssl certificate auth and it was working.

any suggestions are well appreciated.

Thanks,  
Karthik.

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [January 28, 2021, 7:32pm UTC](https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530/2 "2021-01-28T19:32:58Z")

</div>

WinRM certificate auth require certain extensions and authentication methods to be enabled, you can’t just use a server authentication certificate that you would use for a website for this. We even document how to create these certs using PowerShell or OpenSSL [https://docs.ansible.com/ansible/latest/user\_guide/windows\_winrm.html#certificate](https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html#certificate). Essentially you need a certificate that is enabled for clientAuth (1.3.6.1.5.5.7.3.2) and then a subjectAltName with a specific text value that specifies your user name.

---

<div class="post-metadata">

**Author:** ![karthik\_kumar1](https://avatars.discourse-cdn.com/v4/letter/k/22d042/32.png) [@karthik\_kumar1](https://forum.ansible.com/u/karthik_kumar1)\
**Post date:** [February 3, 2021, 2:36pm UTC](https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530/3 "2021-02-03T14:36:04Z")

</div>

Hi,

Thanks for the reply and information. i have one question, can we use openssl CA for this purpose? and do you have any steps on how to create Openssl CA certificate?

Thanks in advance.

Regards,  
Karthik.

---

<div class="post-metadata">

**Author:** ![Antony\_Stone](https://avatars.discourse-cdn.com/v4/letter/a/4491bb/32.png) [@Antony\_Stone](https://forum.ansible.com/u/Antony_Stone)\
**Post date:** [February 3, 2021, 4:20pm UTC](https://forum.ansible.com/t/ansible-authentication-with-windows-by-using-godaddy-or-third-party-certificates/34530/4 "2021-02-03T16:20:33Z")

</div>

This question has been answered many many times on various websites before:

[https://gist.github.com/Soarez/9688998](https://gist.github.com/Soarez/9688998)

[https://gist.github.com/fntlnz/cf14feb5a46b2eda428e000157447309](https://gist.github.com/fntlnz/cf14feb5a46b2eda428e000157447309)

[https://stackoverflow.com/questions/10175812](https://stackoverflow.com/questions/10175812)

[https://www.openssl.org/docs/man1.0.2/man1/ca.html](https://www.openssl.org/docs/man1.0.2/man1/ca.html)

Regards,

Antony.