• Login to the target server with the certificate
• Open Microsoft management control (mmc) | click on file | add/remove snap in | Select
certificates| Add
• Select Computer account | Next
• Select Local Computer | Finish
• Expand certificates | Personal |Certificates.
• Open certificate |details tab | Thumbprint | Copy the Thumbprint
• Open Command prompt as Administrator
• Enter Command - winrm e winrm/config/listener
• Winrm listener will be listed
• Remove the listener which is expired
• Command - winrm delete winrm/config/Listener?Address=*+Transport=HTTPS
• Command - winrm create
winrm/config/Listener?Address=*+Transport=HTTPS@<CertificateThumbprint="xxxxxxxxxxx
xxxxx">
• Command - winrm e winrm/config/listener
• Check Winrm listener will be listed with new Thumbprint
• Create base 64 certificate
• Expand certificates | personal | certificates
• Open certificate | Details Tab | Select Copy to File
• Next | Select No,do not export the private key | Next
• Check Base-64 encoded X.509(.CER) | Next
• Save the certificate | Finish
• Open certificate |Details Tab
• Confirm Base-64 certificate
• Login to agent manager server
1. Go to Quest folder and paste the certificate
2. Open command prompt as admin
3. Go to C:\>cd "Quest\Foglight Agent Manager\bin"
• Enter command - fglam --add-certificate citrix=C:\Quest\certname.cer
• Output - Certificate added: Certificate from C:\Quest\certname.cer added as mycertificate
• Restart Agent manager from Windows services console