enumerate winrm listeners
winrm e winrm/config/listener
disable a listener
winrm set winrm/config/listener?Address=*+Transport=HTTP @{Enabled="false"}
openssl generate a private key and csr
openssl req -newkey rsa:2048 -nodes -keyout cert.key -out cert.csr
winrm set WinRM/Config/Client/Auth @{Basic="true";Digest="true";Kerberos="true";Negotiate="true";Certificate="true";CredSSP="true"}