Using Remote Desktop Connection to connect from Win7 to Win2008 Server R2, what is the difference in installing a self-signed certificate (for server authentication only) and installing a regular signed certificate? I know the difference between the certificates, but how do I install a signed certificate (which is normally used for a website domain) to use for server authentication only (used for connecting through Remote Desktop Connection)? I know I sound like someone paranoid, but I would like to understand the procedure necessary to replace the self-signed certificate with a signed certificate. Thanks for all the help and Have a great day!
A. Buy your cert. Like you say, it's the same as one you would get for a web site. Just make sure the name of it matches the name the users will go to for RDP.
B. Install the cert by doing this:
C. Enforce SSL by doing this:
D. If you're making this server accessible from your internal network to the internet, you then need to give it an external IP and have TCP port 3389 opened on the firewall.
E. Create an A record in DNS that matches exactly the name of the cert.
That should do it. Note that you'll want to review the security configuration in step C7 above to your preference - that config will lock it down nice and tight and will work for anyone running Vista or later.
I believe you need to: