How to set up client side certificate authentication using an enterprise CA for a TS gateway via Forefront TMG 2010?
To date I have executed the following:
- I have a Terminal Services Gateway configured and working in house.
- I set up a basic unauthenticated publishing rule to test that the certificates, etc are good.
- I updated this rule according to this technet article.
At varying points I have also tried enabling / disabling the client certificates on my IIS instance, the 'require ssl client certificate' and 'require all users to authenticate' options in TMG and a couple options in the client client certificate trust list.
EDIT - I'm specifically interested in any listener, IIS or RADIUS specific parts of the configuration but a summary of the whole would probably be beneficial to the community at large.