Can Storage Replica use WinRM over https?

Rich B 6 Reputation points
2020-08-06T10:50:02.403+00:00

On the Storage Replica documentation it lists one of the Pre-requisites as "Appropriate firewall and router rules to allow ICMP, SMB (port 445, plus 5445 for SMB Direct) and WS-MAN (port 5985) bi-directional traffic between all nodes."

Further down the same page it lists the command to set up WinRM as:
"winrm quickconfig"

Can Storage Replica use WinRM over https? If I try to run the command:
"winrm quickconfig -transport:https"

then I get a message which describes the properties required for a certificate:
"Message = Cannot create a WinRM listener on HTTPS because this machine does not have an appropriate certificate. To be used for SSL, a certificate must have a CN matching the hostname, be appropriate for Server Authentication, and not be expired, revoked, or self-signed.
Error number: -2144108267 0x80338115"

My question is, does Storage Replica work in the server-to-server mode over https? If so, what are the requirements re the certificates, i.e. do both machines need to use the same cert? Or do they each have their own? Do they need to share their certs and does Storage Replica handle that automatically or do I need to install both certificates on both machines, or the public cert of one machine stored on the other?

Specifically, it's over WinRM that the SR-Partnership is created. How do I set up both servers such that the New-SRPartnership command is successful, if I want the setup to use WinRM over HTTPS rather than WinRM over HTTP?

Thanks in advance.

Windows Server Storage
Windows Server Storage
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Storage: The hardware and software system used to retain data for subsequent retrieval.
650 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Xiaowei He 9,891 Reputation points
    2020-08-07T06:39:08.12+00:00

    Hi,

    --Further down the same page it lists the command to set up WinRM as: "winrm quickconfig"

    This command is used if we use the Windows Admin Center to manage the Storage replica, the command is used to enable WinRM services and enable WinRM Firewall Exception to allow remote management.

    --My question is, does Storage Replica work in the server-to-server mode over https?

    Storage Replica mainly use SMB protocol:

    16260-image.png

    https://video2.skills-academy.com/en-us/windows-server/storage/storage-replica/storage-replica-overview#:~:text=Server%20to%20server%20allows%20synchronous,requires%20manual%20intervention%20for%20failover.

    ------------------------

    If the reply could be of help, please help to accept it as an answer, thanks for your cooperation!
    Thanks for your time!
    Best Regards,
    Anne


  2. Xiaowei He 9,891 Reputation points
    2020-08-14T03:15:35.703+00:00

    Hi,

    I would like to check if the above reply could be of help? If yes, please help accept it as an answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

    Besides, I would like to check if you could receive the Email notification when we reply your post? We appreciate your feedback.


    If the reply could be of help, please help to accept it as an answer, thanks for your cooperation!
    Thanks for your time!
    Best Regards,
    Anne

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.