Hosting
Last updated
Last updated
You can host PowerShell Universal as a Windows Service, in IIS, as a Azure Web App or just as a stand alone application. If you are running on Windows, we suggest either a Windows Service or IIS.
To host as a Windows Service, you can download and install the PowerShell Universal MSI. The MSI will automatically install the PowerShell Universal service and start it. Jobs will run under the system account by default but you can configure the service to run under another account after installation.
After the MSI has finished setup, your default web browser will open to for login. The default login credentials are set to Admin and any password.
You do not need to use the MSI to configure Universal as a Windows Service. You can also do it manually with the following PowerShell script.
Read our .
You can also host the Universal server as a stand alone application. Simply run the Universal.Server.exe from the binary directory to utilize the to start the web server.
Windows
%ProgramData%\PowerShellUniversal
Linux
%HOME%/.PowerShellUniversal
To set the port, change the Kestrel endpoints section of the appsettings.json. By default, the configuration is defined to listen on port 5000 and on any address.
To configure HTTPS, you can adjust the appsettings.json file to use a particular certificate and port. The below configuration uses the testCert.pfx file and testPassword and listens on port 5463.
To configure a certificate in a particular location and store, you can use a configuration such as this.
When selecting the certificate by subject name, ensure you use the common name with out CN= prefix.
Location can be either CurrentUser or LocalMachine.
You can use thumbprint rather than subject in version 3.4 and later.
Some providers, like Let's Encrypt and GoDaddy, will issue certificates as PEM and key text files. You can use these types of certificates directly with the Kestrel web server. You will need to specify the HttpsFromPem section within the Endpoints for Kestrel.
By default, Universal will listen on HTTP1 and HTTP2. You can adjust the protocols that the server listens to by setting the Protocols property. For example, you can specifically set HTTP1 and HTTP2 support with the following setting.
Some versions of Windows Server (like 2012R2), do not support HTTP2. To disable HTTP2 support, set the listener to only listen on HTTP1.
In this example, we'll show how to create a self-signed certificated and use it with PowerShell Universal.
First, create a self-signed certificate and store it into your local machine store. You will need to run PowerShell as administrator. The local machine store is required because PowerShell Universal may be running as service and not as your account.
Next, you'll need to configure PowerShell Universal to use the certificate. This can be accomplished by editing or creating the appsettings.json file in %ProgramData%\PowerShellUniversal. This file should already exist if you installed with the MSI installer. The contents of the file should include the DNS name of your certificate and the location.
For self-signed certificates, you will need to include the AllowInvalid option.
Once you have updated the appsettings.json file, restart the PowerShell Universal service. You should now be able to access your PowerShell Universal web site at https://localhost.
You can set the port of the Universal server by modifying the appsettings.json file. We recommend that you create an appsettings.json file in the .
For a full set of listening options, you can refer to the .