I'm trying to harden our RDP service so we can use a specific server without having to VPN into our network. I would like the RDP Session Host Server to use certificates from an authorized certificate authority like Verisign or RapidSSL. I can't seem to find any good tutorials covering this, if it's even possible. Right now we use the default self-signed certificate provided. When I choose 'Select', only the default self-signed cert is displayed. No other options. I'm not quite sure how to add our CA cert from our official cert authority. Is there a way change configure this for a 3rd party CA Cert?
Also, for encryption level, is it more secure to set this to high or FIPS compliant? If you think it's unwise to expose the RDP service, please share.
Any info is greatly appreciated.
I guess I should add this server is also a member of an Active Directory Domain.