# Ansible WinRM allow unencrypted connections - extra step ?

**URL:** <https://forum.ansible.com/t/ansible-winrm-allow-unencrypted-connections-extra-step/24237>\
**Category:** Ansible Project\
**Created:** [April 18, 2017, 10:37am UTC](https://forum.ansible.com/t/ansible-winrm-allow-unencrypted-connections-extra-step/24237 "2017-04-18T10:37:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![glerch3000](https://avatars.discourse-cdn.com/v4/letter/g/a587f6/32.png) [@glerch3000](https://forum.ansible.com/u/glerch3000)\
**Post date:** [April 18, 2017, 10:37am UTC](https://forum.ansible.com/t/ansible-winrm-allow-unencrypted-connections-extra-step/24237/1 "2017-04-18T10:37:28Z")

</div>

Hey guys,  
Hopefully just a quick issue you can educate me on. When using the ConfigureRemotingForAnsible.ps 1 script, I find that I must still execute this afterwards to win\_ping, for example

–\>\> winrm set winrm/config/service ‘@{AllowUnencrypted=“true”}’ .

I’m not using kerberos. I think my setup is pretty basic. Going thru the ConfigureRemoting…ps1 script, i don’t see anything about allowing unencrypted connections, but I do see this check near the end.

| 

If($httpResult -and$httpsResult)

 |
| | 

{

 |
| | 

Write-Verbose “HTTP: Enabled | HTTPS: Enabled”

 |
| | 

}

 |

Is this something in development, or am I missing some basic step somewhere.

Thanks for your help so far. I appreciate it, and ansible.

hosts file

ansible\_ssh\_user=Administrator  
ansible\_ssh\_pass=mypass  
ansible\_ssh\_port=5985  
ansible\_connection=winrm

# ansible\_winrm\_cert\_validation= ignore

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [April 19, 2017, 8:53pm UTC](https://forum.ansible.com/t/ansible-winrm-allow-unencrypted-connections-extra-step/24237/2 "2017-04-19T20:53:53Z")

</div>

If you are using the Configure...ps1 script to set up your Windows host and WinRM you should set your port to 5986 so Ansible uses TLS to encrypt your traffic. When doing this you will also need to uncomment the ansible\_winrm\_server\_cert\_validation entry as the Configure...ps1 script created a self signed certificate by default.

If not using HTTPS with WinRM (highly insecure) then Windows forces you to allow unencrypted messages first hence the error you are getting right now. There are plans to encrypt messages through HTTP when using particular auth types but nothing has been released around it yet.