Ansible Installation on ubuntu [<a target="_blank" href="https://docs.ansible.com/ansible/latest/installation_guide/installation_distros.html#installing-ansible-on-ubuntu">LINK</a>] Follow the link
Window as Ansible Client
Step1: Create Certificate
<pre><code class="lang-powershell">New-SelfSignedCertificate -DnsName "DNS Name" -CertStoreLocation Cert:\LocalMachine\My
</code></pre>
STEP2: Create HTTPS Listener
<pre><code class="lang-powershell">winrm create winrm/config/Listener?Address=*+Transport=HTTPS '@{Hostname="DNS Name"; CertificateThumbprint="ThumbPrint"}'
</code></pre>
Windows server's local firewall to allow incoming TCP traffic on port 5986. This ensures that the traffic is allowed both at the AWS security group level (5986 and 5985) and at the Windows server's firewall level, thus enabling WinRM over HTTPS communication to the server.
<pre><code class="lang-powershell">netsh advfirewall firewall add rule name="Windows Remote Management (HTTPS-In)" dir=in action=allow protocol=TCP localport=5986
</code></pre>
Make sure the Basic Auth is set to true, if not then execute below commands.
<pre><code class="lang-powershell">Set-Item -Force WSMan:\localhost\Service\auth\Basic $true
</code></pre>
Check The Service
<pre><code class="lang-powershell">winrm get winrm/config
</code></pre>
Ansible Inventory file
<pre><code class="lang-yaml">[win]
172.16.0.67

[win:vars]
ansible_user=Admin
ansible_password=Admin
ansible_port=5986
ansible_connection=winrm
ansible_winrm_server_cert_validation=ignore
ansible_winrm_transport=basic
</code></pre>
Thank You

Ansible Installation on ubuntu \[[LINK](https://docs.ansible.com/ansible/latest/installation_guide/installation_distros.html#installing-ansible-on-ubuntu)\] Follow the link

Window as Ansible Client

Step1: Create Certificate

```powershell
New-SelfSignedCertificate -DnsName "DNS Name" -CertStoreLocation Cert:\LocalMachine\My
```

STEP2: Create HTTPS Listener

```powershell
winrm create winrm/config/Listener?Address=*+Transport=HTTPS '@{Hostname="DNS Name"; CertificateThumbprint="ThumbPrint"}'
```

Windows server's local firewall to allow incoming TCP traffic on port 5986. This ensures that the traffic is allowed both at the AWS security group level (5986 and 5985) and at the Windows server's firewall level, thus enabling WinRM over HTTPS communication to the server.

```powershell
netsh advfirewall firewall add rule name="Windows Remote Management (HTTPS-In)" dir=in action=allow protocol=TCP localport=5986
```

Make sure the Basic Auth is set to true, if not then execute below commands.

```powershell
Set-Item -Force WSMan:\localhost\Service\auth\Basic $true
```

Check The Service

```powershell
winrm get winrm/config
```

Ansible Inventory file

```yaml
[win]
172.16.0.67

[win:vars]
ansible_user=Admin
ansible_password=Admin
ansible_port=5986
ansible_connection=winrm
ansible_winrm_server_cert_validation=ignore
ansible_winrm_transport=basic
```

Thank You

Windows as Ansible Client