# How to make SSL connection with windows node using certificate validation

**URL:** <https://forum.ansible.com/t/how-to-make-ssl-connection-with-windows-node-using-certificate-validation/23941>\
**Category:** Ansible Project\
**Tags:** windows, ubuntu\
**Created:** [March 12, 2017, 4:21am UTC](https://forum.ansible.com/t/how-to-make-ssl-connection-with-windows-node-using-certificate-validation/23941 "2017-03-12T04:21:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paresh\_Pendharkar](https://avatars.discourse-cdn.com/v4/letter/p/f475e1/32.png) [@Paresh\_Pendharkar](https://forum.ansible.com/u/Paresh_Pendharkar)\
**Post date:** [March 12, 2017, 4:21am UTC](https://forum.ansible.com/t/how-to-make-ssl-connection-with-windows-node-using-certificate-validation/23941/1 "2017-03-12T04:21:05Z")

</div>

Hi All,

I have below configuration -

Ansible - version → 2.1.1.0 on Ubuntu 64 bit  
Python version → 2.7.12+

I am able to connect with my windows machine with winrm\_server\_cert\_validation=ignore variable set in hosts file.

Please note , my HTTPS port is listening on 5896 port and it also shows the thumbprint of the self-signed certificate as well.

Now, I want to make server authentication using SSL certificate and dont want to ignore the cert validation.

Because when I try to change the winrm\_server\_cert\_validation variable to → validate then it fails saying SSL certificate verify failed with error 590

Can anybody please let me know the process how to do this ? Do I need to install any certificates in my ansible node? OR Do I need any trusted certificates added to ansible node ? How to do it ?

Thanks in advance.

-Regds,  
Paresh

---

<div class="post-metadata">

**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\
**Post date:** [March 14, 2017, 9:21am UTC](https://forum.ansible.com/t/how-to-make-ssl-connection-with-windows-node-using-certificate-validation/23941/2 "2017-03-14T09:21:36Z")

</div>

I haven’t heard of anyone actually working like this, I suspect because the overhead of acquiring trusted certificates for each and every windows server and then distributing them to your windows machines would be a lot of work for more than a few machines.

Is anyone else doing this?

Jon