Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

Elements Exposure Management WinRM authenticated scan fails with error MI_RESULT_FAILED when using Linux Scan Node

Issue:

Elements Exposure Management WinRM authenticated scan fails with error MI_RESULT_FAILED when using Linux Scan Node.

Error in scan log:
2022-12-06 15:11:06Z|ERROR|Karhu.Scanners.SSNG.AuthMode.Modules.WRM.WRM|Connection failed.
System.Management.Automation.Remoting.PSRemotingTransportException: Connecting to remote server SERVER-01 failed with the following error message : MI_RESULT_FAILED For more information, see the about_Remote_Troubleshooting Help topic.
   at System.Management.Automation.Runspaces.AsyncResult.EndInvoke()
   at System.Management.Automation.Runspaces.Internal.RunspacePoolInternal.EndOpen(IAsyncResult asyncResult)
   at System.Management.Automation.Runspaces.Internal.RemoteRunspacePoolInternal.Open()
   at System.Management.Automation.Runspaces.RunspacePool.Open()
   at System.Management.Automation.RemoteRunspace.Open()
   at Karhu.Scanners.SSNG.AuthMode.Modules.WRM.WRM.Connect(AuthModeEntry authMode)

Resolution:

If a Linux scan node is in use:

  • A user account must meet the following requirement:
    • Local user account added to the Administrators group
  • Run the following PowerShell command on the target Windows computer to allow basic WinRM authentication:
    • winrm set winrm/config/service/auth '@{Basic="true"}'
  • Ensure that DNS resolution is working fine. Check if scanning target using IP only works.