Configuring a vRO/vCAC PowerShell host with Basic Authentication

Published on 23/12/2014 - Read in about 2 min (311 words)

Published under vRealize Orchestrator #Automation #basic authentication #PowerShell #PowerShell #vco #vro #winrm

This article is now 11 years old! It is highly likely that this information is out of date and the author will have completely forgotten about it. Please take care when following any guidance to ensure you have up-to-date recommendations.

To add a Windows Server 2012 R2 PowerShell host using Basic Authentication only, follow these steps.

Ensure that the Windows Firewall service is running (it doesn’t matter if the firewall is enabled or disabled, it should always be running! That’s a general rule, not just for this).

On the PowerShell host open a command prompt (*NOT* PowerShell console) as administrator and run the quickconfig command - you can re-run it if it’s already been run - but make sure it has.

Enable basic authentication:

Finally, allow unencrypted data to be sent:

Testing WinRM configuration

Note: you can do these steps locally on the PowerShell host, or from a remote machine - remote is a truer test.

On the PowerShell host, check that the port is open/listening:

On the WinRM client allow basic authentication (run quickconfig if required first!):

And allow unencrypted:

Finally, test you can connect to the PowerShell host using the winrm client:

Now we know that the WinRM service is in fact listening and responding, we can move on to vRO/vCO

Adding the PowerShell host to vCO

Firstly, make sure you have the latest plugin from the vRO/vCO site ( https://www.vmware.com/support/pubs/vco_plugins_pubs.html ). At the time of writing this is 1.0.4 which supports PowerShell 1.0, 2.0, 3.0 and 4.0 - so Windows Server 2012 R2 is supported. Previous versions didn’t support 4.0.

Run the “Add a PowerShell host” workflow: