WinRM over HTTPS need to disable Kerberos

Some background-

We are using winrm as an event forwarding mechanism.  This traffic will flow over HTTPS through an AWS load balancer.   We have tested communication up to the servers bypassing the load balancer.   Unfortunately we cannot remove the load balancer from our environment.   After testing thoroughly we believe the load balancer is stripping the SSL cert and trying to read the kerberos encrypted info.   Obviously this will fail.   As such what we are trying to test right now is possible removing Kerberos encryption from WinRM and wrapping traffic with HTTPS encryption.  Is this possible?  If so how.....
LVL 1
jamaicanbishopAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

btanExec ConsultantCommented:
Should be available as stated
 enable or disable authentication with the Winrm tool
To set the configuration for the WinRM client, use the Winrm Set command and specify the client. For example, the following command disables digest authentication for the client.
winrm set winrm/config/client/auth @{Digest="false"}
To set the configuration for the WinRM server, use the Winrm Set command and specify the service. For example, the following command enables Kerberos authentication for the service.
winrm set winrm/config/service/auth @{Kerberos="true"}
https://msdn.microsoft.com/en-us/library/aa384295(v=vs.85).aspx
btanExec ConsultantCommented:
To be more explicit, WinRM can be configured to use SSL only even though by default WinRM uses Kerberos for authentication - can see the link in which you need to have
- winrm get winrm/config

(with SSL cert already installed)
- winrm quickconfig -transport:https
- winrm quickconfig

(for testing https is on)
-winrm enumerate winrm/config/listener
https://support.microsoft.com/en-sg/kb/2019527

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
btanExec ConsultantCommented:
To consider ID: 41720982
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SSL / HTTPS

From novice to tech pro — start learning today.