In order to have openwsmand accept secure connections, one has to

1. Enable ssl_port in openwsman.conf. The officially assigned port number is 5986.
2. Provide a server certificate and enter it into openwsman.conf. Point ssl_cert_file to the public part and ssl_key_file to the private part.
3. Run openwsmand with the -S option

Openwsman provides a owsmangencert.sh script in /etc/openwsman.

/etc/openwsman/owsmangencert.sh

it will not overwrite an existing certificate. Run it as

/etc/openwsman/owsmangencert.sh --force

to allow overwriting an existing certificate.

Be sure to enter a correct 2 letter country code. E.g. 'UK' is wrong, use 'GB' instead.