> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/continuous-delivery/use-continuous-delivery/deploy-services-on-different-platforms/traditional/ssh-winrm-faqs.md).

# SSH and WinRM FAQs

This article addresses some frequently asked questions about SSH and WinRM deployments in Harness.

#### How are Harness secrets tied to connector, and what to watch for. <a href="#how-are-harness-secrets-tied-to-connector-and-what-to-watch-for" id="how-are-harness-secrets-tied-to-connector-and-what-to-watch-for"></a>

Customers should be mindful of the fact that connectors are often tied to a secret (password or sshkey) that may expire. This is often a common cause of execution failures with connector errors.

#### Is it possible to use eddsa keys with Harness Git? <a href="#is-it-possible-to-use-eddsa-keys-with-harness-git" id="is-it-possible-to-use-eddsa-keys-with-harness-git"></a>

Yes we support ed25519 key, Command we used to generate key :

```
ssh-keygen -t ed25519 -b 256 -f /Users/test/Documents/temp/edd -m pem
```

#### How to deploy Azure SpringApps JAR via Harness CD? <a href="#how-to-deploy-azure-springapps-jar-via-harness-cd" id="how-to-deploy-azure-springapps-jar-via-harness-cd"></a>

You can take advantage of our ssh deployment and include a step to download the JAR.

#### How do we detect service licenses for SSH deployments? <a href="#how-do-we-detect-service-licenses-for-ssh-deployments" id="how-do-we-detect-service-licenses-for-ssh-deployments"></a>

Please consider the following [Documentation](/continuous-delivery/troubleshooting-and-resources/resources/service-licensing-for-cd.md#ssh-and-winrm). Feel free to reach out to us in case of issues.

#### Does Harness support SSH deployments using the GCP connector like AWS and Azure? <a href="#does-harness-support-ssh-deployments-using-the-gcp-connector-like-aws-and-azure" id="does-harness-support-ssh-deployments-using-the-gcp-connector-like-aws-and-azure"></a>

No, this feature is yet to be supported. We suggest to use ssh key or user and password as data center as an alternative at the moment.

#### Can we use command step for custom stage <a href="#can-we-use-command-step-for-custom-stage" id="can-we-use-command-step-for-custom-stage"></a>

No this is not supported as of now, as currently command step is only applicable in ssh/winrm type deployment

#### Is there a method available to implement a percentage-based repeat strategy for Shell Script Hosts? <a href="#is-there-a-method-available-to-implement-a-percentage-based-repeat-strategy-for-shell-script-hosts" id="is-there-a-method-available-to-implement-a-percentage-based-repeat-strategy-for-shell-script-hosts"></a>

For a rolling strategy, you specify the desired number of instances to deploy per phase. If you have multiple target hosts in a stage and wish to deploy a certain proportion of instances per phase, you can configure it accordingly. This allows for a flexible deployment approach where the number of instances per phase can be defined either as a count or a percentage. Please read more on this in the following [Documentation](/continuous-delivery/use-continuous-delivery/deploy-services-on-different-platforms/traditional/ssh-ng.md#rolling)

#### Why am I getting the error "Host information is missing in Command Step"? <a href="#why-am-i-getting-the-error-host-information-is-missing-in-command-step" id="why-am-i-getting-the-error-host-information-is-missing-in-command-step"></a>

```
Invalid argument(s): Host information is missing in Command Step. Please make sure the looping strategy (repeat) is provided.
```

If you are using the Command step, the `Repeat` looping strategy is required. The above error indicates that the Command step was ran without a `Repeat` looping strategy. To fix this, set the `Repeat` looping strategy for the Command step. For more information on the Command step and the supported looping strategies, go to [SSH and WinRM](/continuous-delivery/use-continuous-delivery/cd-building-blocks/cd-steps/utilities/download-and-copy-artifacts-using-the-command-step.md#ssh-and-winrm) documentation.

#### Download artifact for winrm is not working while Nexus if Windows machine is behind proxy? <a href="#download-artifact-for-winrm-is-not-working-while-nexus-if-windows-machine-is-behind-proxy" id="download-artifact-for-winrm-is-not-working-while-nexus-if-windows-machine-is-behind-proxy"></a>

Nexus is supported, so you can use custom powershell script something like below:

```
Invoke-WebRequest -Uri "$\{URI}" -Headers $Headers -OutFile "$\{OUT_FILE}" -Proxy "$env:HTTP_PROXY"
```

#### How to give the user access to WinRM resources? <a href="#how-to-give-the-user-access-to-winrm-resources" id="how-to-give-the-user-access-to-winrm-resources"></a>

Run command winrm configSDDL default and it should open the dialogue, check if user configured for login already present in the last otherwise add the user

#### How to enable certificate authentication while using WinRM? <a href="#how-to-enable-certificate-authentication-while-using-winrm" id="how-to-enable-certificate-authentication-while-using-winrm"></a>

Its disabled by default and need to run below command to enable Set-Item -Path WSMan:\localhost\Service\Auth\Certificate -Value $true

#### How to fix error: "Socket Connection Failed for url windowshost on port 5985"? <a href="#how-to-fix-error-socket-connection-failed-for-url-windowshost-on-port-5985" id="how-to-fix-error-socket-connection-failed-for-url-windowshost-on-port-5985"></a>

Check if port 5985 is opened and test the communication for WinRM.

#### Create WinRM Credential using Terraform? <a href="#create-winrm-credential-using-terraform" id="create-winrm-credential-using-terraform"></a>

You can automate creating winrm credential/secret key via our existing API as listed [here](https://apidocs.harness.io/tag/Account-Secret#operation/create-account-scoped-secret).

#### How to install artifacts on IIS on a Windows VM? <a href="#how-to-install-artifacts-on-iis-on-a-windows-vm" id="how-to-install-artifacts-on-iis-on-a-windows-vm"></a>

You can use the Copy/Download command option by creating a WinRM connection and deploy the artifact to a Windows VM.

#### Is it possible to add multiple realms when configuring WinRM using Kerberos? <a href="#is-it-possible-to-add-multiple-realms-when-configuring-winrm-using-kerberos" id="is-it-possible-to-add-multiple-realms-when-configuring-winrm-using-kerberos"></a>

Currently, you can provide only one realm per WinRM credential. To add more realms, you must create more WinRM credentials.

#### Winrm execution is failing with the below error: <a href="#winrm-execution-is-failing-with-the-below-error" id="winrm-execution-is-failing-with-the-below-error"></a>

```
Command execution failed. Error: HTTP response '403: URLBlocked' when communicating with <<host>>
```

Need to check if the Windows machine is behind proxy and the same needs to be configured on the delegate host

#### Do we create the target directory for config file copy or artifact download if they do not exist? <a href="#do-we-create-the-target-directory-for-config-file-copy-or-artifact-download-if-they-do-not-exist" id="do-we-create-the-target-directory-for-config-file-copy-or-artifact-download-if-they-do-not-exist"></a>

We do not create the directory if they do not exist, hence we need to ensure the path that we provide do exist on the target host.

#### Does Harness support automatic rollback for SSH/WINRM deployment types? <a href="#does-harness-support-automatic-rollback-for-sshwinrm-deployment-types" id="does-harness-support-automatic-rollback-for-sshwinrm-deployment-types"></a>

No, you need to write a custom script where you can get the previous version and create a new forward deployment with the required version of the artifact and the manifest.

#### How do I reference privateIp for an EC2 instance while using a ssh type deployment? <a href="#how-do-i-reference-privateip-for-an-ec2-instance-while-using-a-ssh-type-deployment" id="how-do-i-reference-privateip-for-an-ec2-instance-while-using-a-ssh-type-deployment"></a>

You can make use of `<+instance.properties.privateIp>` for all available variables under instance properties. You can print `<+instance.properties.*>` and confirm this list.