I am trying to find a command-line tool or script that I can use to select which certificate my Windows 2008 R2 Remote Desktop Session Host (Terminal Server) will use. I have the certificate installation automated, but my google-fu is failing and I am not find a method to select the certificate for use.

The setting I am trying to change via cli/script would be performed through the GUI doing the following

  • Open Remote Desktop Session Host Configuration
  • Double Click on RDP-Tcp for the properties
  • From the general tab click on the 'Select' button. A dialog box automatically shows up showing the certificate that I had already installed, click 'OK'.
  • Click 'OK'.

So please point me to any scripts, command line tools, registry hacks, or group policies that I could use to automate this certificate select step.

link|improve this question

If it makes you feel any better about your Google-fu, I have never been able to find a way to do this programatically either. – squillman Mar 1 '11 at 23:24
feedback

1 Answer

up vote 1 down vote accepted

PowerShell might do it for you...

I'm not sure how to script this.

On the RDS box, in Administrative Tools, Run As Administrator - Windows PowerShell Modules.

CD RDS:
CD .\RDSConfiguration\Connections\RDP-Tcp\SecuritySettings
Set-Item .\SSLCertificateSHA1Hash

You will need to have the thumbprint of the certificate, I believe.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.