{"id":425,"date":"2026-10-14T07:41:36","date_gmt":"2026-10-14T07:41:36","guid":{"rendered":"http:\/\/www.scmgalaxy.com\/tutorials\/2015\/08\/21\/bootstrap-a-microsoft-windows-node-using-chef\/"},"modified":"2026-10-14T07:41:36","modified_gmt":"2026-10-14T07:41:36","slug":"bootstrap-a-microsoft-windows-node-using-chef","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/bootstrap-a-microsoft-windows-node-using-chef\/","title":{"rendered":"Bootstrap a Windows Node with Chef over WinRM (Knife Windows Guide)"},"content":{"rendered":"\n

Bootstrapping a Windows node with Chef over WinRM installs Chef Infra Client on the target host, registers it with Chef Server, and applies an initial run list. This revised guide is for DevOps engineers who want a clean, repeatable baseline command and a safer way to operate it.<\/p>\n\n\n\n

Originally published on 2015-08-21; fully revised and updated.<\/em><\/p>\n\n\n\n

\"Original<\/a><\/figure>\n\n\n\n

The original note emphasized that the knife windows<\/strong> plugin is required and used knife bootstrap windows winrm<\/code> to onboard a node. References preserved from the original post: original permalink<\/a> and knife windows plugin documentation link<\/a>.<\/p>\n\n\n\n

Prerequisites for Windows bootstrap over WinRM<\/h2>\n\n\n\n
  • A workstation with Chef and knife<\/code> configured to reach your Chef Server.<\/li>
  • The Windows target host reachable over WinRM.<\/li>
  • A WinRM-capable account (the original example used administrator<\/code>).<\/li>
  • A planned Chef node name and initial run list (for example, recipe[snc_firefox]<\/code>).<\/li>
  • The knife windows<\/code> plugin available on the workstation, as called out in the source post.<\/li><\/ul>\n\n\n\n

    Bootstrap workflow<\/h2>\n\n\n\n
    \nflowchart TD\n    A[Collect host, credentials, and run list] --> B[Confirm WinRM access]\n    B --> C[Run knife bootstrap windows winrm]\n    C --> D[Install Chef Infra Client on Windows node]\n    D --> E[Register node and client in Chef Server]\n    E --> F[Apply initial run list]\n    F --> G[Verify node registration]\n<\/pre>\n\n\n\n
    Command variants from the original post<\/h2>\n\n\n\n
    The source contained both a long-option and short-option style command. The password has been intentionally replaced with a placeholder, and the obvious typo nife<\/code> has been corrected to knife<\/code>.<\/p>\n\n\n\n
    Style<\/th>Example options<\/th>Best for<\/th>Notes<\/th><\/tr><\/thead>
    Long options<\/td>--winrm-user<\/code> --winrm-password<\/code><\/td>Readable scripts and handoffs<\/td>Most explicit and easiest to review.<\/td><\/tr>
    Short options<\/td>-x<\/code> -P<\/code><\/td>Fast interactive usage<\/td>Aliases can differ by knife version; verify with local help output.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
    Long-form command example<\/h3>\n\n\n
    knife bootstrap windows winrm windows-host.example.com \\\n  --winrm-user Administrator \\\n  --winrm-password \"$WINRM_PASSWORD\"<\/span> \\\n  --node-name firefox_win \\\n  --run-list<\/span> 'recipe[snc_firefox]'<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    Short-form command example<\/h3>\n\n\n
    knife bootstrap windows winrm windows-host.example.com \\\n  -x Administrator \\\n  -P \"$WINRM_PASSWORD\"<\/span> \\\n  --node-name firefox_win \\\n  --run-list<\/span> 'recipe[snc_firefox]'<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    Post-bootstrap validation commands<\/h2>\n\n\n
    knife node show firefox_win\nknife client show firefox_win\nknife node list<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    Common pitfalls<\/h2>\n\n\n\n
    • Storing WinRM passwords directly in shell history instead of using environment variables or a secret manager.<\/li>
    • WinRM connectivity failures caused by network path, host resolution, or endpoint configuration issues.<\/li>
    • Using an incorrect run list or recipe name during first converge.<\/li>
    • Assuming short flags always map the same way across knife versions.<\/li>
    • Simple command typos (for example, nife<\/code> instead of knife<\/code>).<\/li><\/ul>\n\n\n\n
      Best practices<\/h2>\n\n\n\n
      • Prefer long-form flags in automation for clarity and auditability.<\/li>
      • Inject credentials at runtime (for example, environment variables) rather than hardcoding.<\/li>
      • Run knife bootstrap windows winrm --help<\/code> on your workstation to confirm exact option behavior for your installed version.<\/li>
      • Validate node and client objects immediately after bootstrap to catch registration issues early.<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"
        Learn how to bootstrap a Microsoft Windows node using Chef with the `knife bootstrap windows winrm` workflow. This revised guide adds prerequisites, command variants, validation steps, and operational pitfalls.<\/p>\n","protected":false},"author":1,"featured_media":3392,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[55],"tags":[568,1545,1546,407,148,1543,1544,182,1547],"class_list":["post-425","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows","tag-bootstrap","tag-bootstrap-microsoft-windows-node","tag-bootstrap-node","tag-chef","tag-microsoft","tag-node","tag-node-using-chef","tag-windows","tag-windows-server-node"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=425"}],"version-history":[{"count":3,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/425\/revisions"}],"predecessor-version":[{"id":79298,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/425\/revisions\/79298"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media\/3392"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}