Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to find a command-line tool or script that I can use to select which certificate my Windows 2008 R2 Remote Desktop Session Host (Terminal Server) will use. I have the certificate installation automated, but my google-fu is failing and I am not find a method to select the certificate for use.

The setting I am trying to change via cli/script would be performed through the GUI doing the following

  • Open Remote Desktop Session Host Configuration
  • Double Click on RDP-Tcp for the properties
  • From the general tab click on the 'Select' button. A dialog box automatically shows up showing the certificate that I had already installed, click 'OK'.
  • Click 'OK'.

So please point me to any scripts, command line tools, registry hacks, or group policies that I could use to automate this certificate select step.

share|improve this question
If it makes you feel any better about your Google-fu, I have never been able to find a way to do this programatically either. – squillman Mar 1 '11 at 23:24
up vote 1 down vote accepted

PowerShell might do it for you...

I'm not sure how to script this.

On the RDS box, in Administrative Tools, Run As Administrator - Windows PowerShell Modules.

CD .\RDSConfiguration\Connections\RDP-Tcp\SecuritySettings
Set-Item .\SSLCertificateSHA1Hash

You will need to have the thumbprint of the certificate, I believe.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.