Windows Server PowerShell Web Services

Before installing the PowerShell Web site service, it is recommended that you have a CA server in the enterprise because the subsequent PowerShell Web service needs to be accessed using the HTTPS protocol, and the installation of the PowerShell Web site service is simple, just add a feature, and the following starts to install

In the server management interface of Windows Server 2012, click Manage-Add roles and features

650) this.width=650; "title=" 01.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1c/wkiom1srzfdgs4mjaao9oghqf0y847.jpg "width=" 720 "height=" 541 "alt=" Wkiom1srzfdgs4mjaao9oghqf0y847.jpg "/>

Default Next

650) this.width=650; "title=" 02.png "style=" height:567px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1a/wkiol1srzplzrci3aalb1ixv-ui324.jpg "width=" 720 "height=" 567 "alt=" Wkiol1srzplzrci3aalb1ixv-ui324.jpg "/>

Default Next

650) this.width=650; "title=" 03.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1c/wkiom1srzfhwveqjaai0c0mtele469.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srzfhwveqjaai0c0mtele469.jpg "/>

650) this.width=650; "title=" 04.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1a/wkiol1srzplaxs9oaalh9ujv3qc362.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzplaxs9oaalh9ujv3qc362.jpg "/>

650) this.width=650; "title=" 05.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1c/wkiom1srzflzkg6waamcvvhddfc499.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srzflzkg6waamcvvhddfc499.jpg "/>

On the Select Features page, select Windows PowerShell Web Access

650) this.width=650; "title=" 06.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1a/wkiol1srzpowakxnaam-kg_cqtu966.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzpowakxnaam-kg_cqtu966.jpg "/>

Jinzhao will appear depending on the feature installation page, click "Add Features" installation depends on the function

650) this.width=650; "title=" 07.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/57/1C/ Wkiom1srzfldovb5aagdboy3ehg269.jpg "alt=" Wkiom1srzfldovb5aagdboy3ehg269.jpg "/>

650) this.width=650; "title=" 08.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1a/wkiol1srzpsa1ymnaanyg9ta3-u422.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzpsa1ymnaanyg9ta3-u422.jpg "/>

The next installation basically does not need to be configured, directly by default until the next installation is complete

650) this.width=650; "title=" 09.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1a/wkiol1srzsdh_hryaamdf_w_5fw888.jpg "width=" 720 "height=" 511 "alt=" WKioL1SRZSDh_ Hryaamdf_w_5fw888.jpg "/>

650) this.width=650; "title=" 10.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1c/wkiom1srzictcca-aalwmnlyuko358.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srzictcca-aalwmnlyuko358.jpg "/>

650) this.width=650; "title=" 11.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1a/wkiol1srzslxnzz-aalne0y51pk400.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzslxnzz-aalne0y51pk400.jpg "/>

650) this.width=650; "title=" 12.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1c/wkiom1srziga937laake2ij_n-4918.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srziga937laake2ij_n-4918.jpg "/>

After installation, we open IIS Manager, as

650) this.width=650; "title=" 13.png "style=" height:493px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1a/wkiol1srzspiew-maaor7yepjio936.jpg "width=" 720 "height=" 493 "alt=" Wkiol1srzspiew-maaor7yepjio936.jpg "/> Start with the following command:

install-pswawebapplication-usetestcertificate To install a self-test credential so that subsequent SSL connection tests can be performed

650) this.width=650; "title=" 14.png "style=" height:529px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1c/wkiom1srzikgv1ijaal8prulqki829.jpg "width=" 720 "height=" 529 "alt=" Wkiom1srzikgv1ijaal8prulqki829.jpg "/>

After running the above command, we can have one more Pswa directory under the default website.

We continue to execute the following commands under PowerShell:

Add-pswaauthorizationrule-username *-computername *-configurationname *

The purpose of this command is to:

* Indicates that all allowed users are allowed to connect to all destination computers, which can be customized according to company security requirements, more strictly.

650) this.width=650; "title=" 16.png "style=" height:529px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1c/wkiom1srzitbmqnyaahemuwnn4u749.jpg "width=" 720 "height=" 529 "alt=" Wkiom1srzitbmqnyaahemuwnn4u749.jpg "/>

After running the command, we access the following link through HTTPS, because the certificate has not been requested, so here will show the security certificate of this site is a problem, because the current use of the certificate is a self-signed certificate, temporarily can be ignored, and finally we will apply for a certificate!

650) this.width=650; "title=" 17.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1a/wkiol1srzuxznd1oaajkme_1shw768.jpg "width=" 720 "height=" 541 "alt=" Wkiol1srzuxznd1oaajkme_1shw768.jpg "/>

Click "Continue to this site", the following landing screen appears

650) this.width=650; "title=" 18.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1c/wkiom1srzksa8azoaahlbqmwatu213.jpg "width=" 720 "height=" 541 "alt=" Wkiom1srzksa8azoaahlbqmwatu213.jpg "/>

650) this.width=650; "title=" 19.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1a/wkiol1srzubcxv86aahf_aditb0928.jpg "width=" 720 "height=" 541 "alt=" Wkiol1srzubcxv86aahf_aditb0928.jpg "/>

Enter the user name and password, as well as the computer name, click Login, you can see the PowerShell Web site landing to the server

650) this.width=650; "title=" 20.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1c/wkiom1srzkwhqurraagq9ysunqg576.jpg "width=" 720 "height=" 541 "alt=" Wkiom1srzkwhqurraagq9ysunqg576.jpg "/>

Here we can operate the server via the PowerShell command

650) this.width=650; "title=" 21.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1c/wkiom1srzkwsktgiaahhk0oiqy8584.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srzkwsktgiaahhk0oiqy8584.jpg "/>

Let's look at the effect after entering the command

650) this.width=650; "title=" 22.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1a/wkiol1srzujtssrgaasfrr2xox8536.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzujtssrgaasfrr2xox8536.jpg "/>

Just now we saw the self-signed will prompt the certificate security issue, below we to the PowerShell Web site to request a trusted certificate, we request through IIS, certificate application There are many ways, here is a simple way to request a certificate from IIS. Open IIS Manager and navigate to the following node

650) this.width=650; "title=" 23.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/57/1c/wkiom1srzkjrp7rgaatb6shbycc454.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srzkjrp7rgaatb6shbycc454.jpg "/>

Click on the "server" certificate to enter the following interface, you can see the self-signed certificate we just created with the command

650) this.width=650; "title=" 24.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1a/wkiol1srzurg-as2aaolxe-vhfs520.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzurg-as2aaolxe-vhfs520.jpg "/>

Click "Create domain Certificate" under the Action bar, enter the common name and other options, here is the most important is the universal name bar, here must be our actual access to the network name, for example, I would like to access the next https://robindc03.corp.robin.com, So the general name here is robindc03.corp.robn.com.

650) this.width=650; "title=" 25.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/57/1C/ Wkiom1srznoqtfkeaag1dcaoclk700.jpg "alt=" Wkiom1srznoqtfkeaag1dcaoclk700.jpg "/>

Select the certification authority in our domain and then fill in a friendly name for the certificate, and here I am powershellservice

650) this.width=650; "title=" 26.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/57/1A/ Wkiol1srzxxtaf96aagpwfnaato914.jpg "alt=" Wkiol1srzxxtaf96aagpwfnaato914.jpg "/>

In this case, the certificate request is completed, we go back to just the interface, you can see the certificate just applied

650) this.width=650; "title=" 27.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1c/wkiom1srznbjehbbaapmihaonly303.jpg "width=" 720 "height=" 511 "alt=" Wkiom1srznbjehbbaapmihaonly303.jpg "/>

Let's start by assigning the certificate to our PowerShell website service, go to the Default Web site node, click Bindings in the Action Bar

650) this.width=650; "title=" 28.png "style=" height:511px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/57/1a/wkiol1srzxji7-liaau15mywltc013.jpg "width=" 720 "height=" 511 "alt=" Wkiol1srzxji7-liaau15mywltc013.jpg "/>

Select the HTTPS type, then click "Edit"

650) this.width=650; "title=" 29.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/57/1A/ Wkiol1srzxmbbjooaaeszhcz-ui800.jpg "alt=" Wkiol1srzxmbbjooaaeszhcz-ui800.jpg "/>

In the SSL certificate, select the certificate we just created via the dropdown box and click "OK"

650) this.width=650; "title=" 30.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/57/1C/ Wkiom1srznjbttqsaafla5a_ydo676.jpg "alt=" Wkiom1srznjbttqsaafla5a_ydo676.jpg "/>

Next we revisit the https://robindc03.corp.robin.com, and we can see that the certificate security issue is not prompted

650) this.width=650; "title=" 31.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1a/wkiol1srzxnqxkxeaahrsvistgy334.jpg "width=" 720 "height=" 541 "alt=" Wkiol1srzxnqxkxeaahrsvistgy334.jpg "/>

After logging in, we can remotely operate our servers.

650) this.width=650; "title=" 32.png "style=" height:541px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/57/1c/wkiom1srzniqsbadaanpwv_xst0574.jpg "width=" 720 "height=" 541 "alt=" Wkiom1srzniqsbadaanpwv_xst0574.jpg "/>

In this way, we can manage the server through the Web Management remote server, like SSH management under Linux!

This article from "Robin's Home" blog, declined reprint!

Windows Server PowerShell Web site Services