# Can't connect using winrm not accepting self-signed certs

**URL:** <https://forum.ansible.com/t/cant-connect-using-winrm-not-accepting-self-signed-certs/25380>\
**Category:** Ansible Project\
**Created:** [August 31, 2017, 6:18am UTC](https://forum.ansible.com/t/cant-connect-using-winrm-not-accepting-self-signed-certs/25380 "2017-08-31T06:18:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Julian\_Bueno](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@Julian\_Bueno](https://forum.ansible.com/u/Julian_Bueno)\
**Post date:** [August 31, 2017, 6:18am UTC](https://forum.ansible.com/t/cant-connect-using-winrm-not-accepting-self-signed-certs/25380/1 "2017-08-31T06:18:04Z")

</div>

My issue here: [https://github.com/ansible/ansible/issues/28863](https://github.com/ansible/ansible/issues/28863)

By default `ConfigureRemotingForAnsible.ps1`creates a self signed certificate which isn’t trusted by default.

How can I make it trusted?

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [August 31, 2017, 7:33am UTC](https://forum.ansible.com/t/cant-connect-using-winrm-not-accepting-self-signed-certs/25380/2 "2017-08-31T07:33:29Z")

</div>

Hi

As a quick starting step you can add the following to your inventory so that Ansible works with untrusted certificates.

> ansible\_winrm\_server\_cert\_validation: ignore

If you want to actually connect with HTTPS and work with the trust mechanism without ignoring it you would need to import the certificates to the Ansible host’s trust store. I’ve never really done it myself but there would be some guides on the internet.

Thanks

Jordan