Remove all emojis from markdown documentation
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
@@ -113,7 +113,7 @@ Your Computer Remote PC
|
||||
│ CN=*.logon.ds.ge.com │
|
||||
│ Self-signed (untrusted) │
|
||||
│ │
|
||||
├─ ❌ ERROR: Untrusted certificate │
|
||||
├─ ERROR: Untrusted certificate │
|
||||
│ │
|
||||
└─ Must use -SessionOption
|
||||
to skip validation
|
||||
@@ -136,7 +136,7 @@ Your Computer Remote PC
|
||||
├─ Checks issuer: Shopfloor WinRM CA │
|
||||
├─ Do I trust this issuer? │
|
||||
├─ YES! (CA is in Trusted Root) │
|
||||
├─ ✓ Certificate trusted │
|
||||
├─ Certificate trusted │
|
||||
│ │
|
||||
└─ Connection succeeds! ◄─────────────┘
|
||||
No -SessionOption needed!
|
||||
@@ -230,7 +230,7 @@ $cert = Import-PfxCertificate `
|
||||
|
||||
# Test basic connectivity - NO -SessionOption needed!
|
||||
Test-WSMan -ComputerName g9kn7pz3esf.logon.ds.ge.com -UseSSL -Port 5986
|
||||
# ✓ Works! No certificate errors!
|
||||
# Works! No certificate errors!
|
||||
|
||||
# Get credentials
|
||||
$cred = Get-Credential
|
||||
@@ -238,7 +238,7 @@ $cred = Get-Credential
|
||||
# Interactive session - NO -SessionOption needed!
|
||||
Enter-PSSession -ComputerName g9kn7pz3esf.logon.ds.ge.com `
|
||||
-Credential $cred -UseSSL -Port 5986
|
||||
# ✓ Connected! No certificate warnings!
|
||||
# Connected! No certificate warnings!
|
||||
|
||||
# Run remote command
|
||||
Invoke-Command -ComputerName g9kn7pz3esf.logon.ds.ge.com `
|
||||
@@ -265,10 +265,10 @@ Enter-PSSession -ComputerName g9kn7pz3esf.logon.ds.ge.com `
|
||||
```
|
||||
|
||||
**Problems:**
|
||||
- ❌ Certificate validation bypassed (insecure)
|
||||
- ❌ Same certificate on all 175 PCs
|
||||
- ❌ If compromised, affects all PCs
|
||||
- ❌ Certificate CN mismatch errors
|
||||
- Certificate validation bypassed (insecure)
|
||||
- Same certificate on all 175 PCs
|
||||
- If compromised, affects all PCs
|
||||
- Certificate CN mismatch errors
|
||||
|
||||
---
|
||||
|
||||
@@ -281,12 +281,12 @@ Enter-PSSession -ComputerName g9kn7pz3esf.logon.ds.ge.com `
|
||||
```
|
||||
|
||||
**Benefits:**
|
||||
- ✅ Proper certificate validation (secure)
|
||||
- ✅ Each PC has its own certificate
|
||||
- ✅ If one compromised, only affects one PC
|
||||
- ✅ Proper hostname in certificate (no CN mismatch)
|
||||
- ✅ Easy to revoke individual certificates
|
||||
- ✅ Professional enterprise approach
|
||||
- Proper certificate validation (secure)
|
||||
- Each PC has its own certificate
|
||||
- If one compromised, only affects one PC
|
||||
- Proper hostname in certificate (no CN mismatch)
|
||||
- Easy to revoke individual certificates
|
||||
- Professional enterprise approach
|
||||
|
||||
---
|
||||
|
||||
@@ -380,9 +380,9 @@ When you connect, Windows automatically validates:
|
||||
↓
|
||||
4. YES! Found in Cert:\LocalMachine\Root
|
||||
↓
|
||||
5. ✓ Certificate trusted
|
||||
5. Certificate trusted
|
||||
↓
|
||||
6. ✓ Connection allowed
|
||||
6. Connection allowed
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user