Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to set up remote app for a internal domain. I have a Root CA that is trusted my all of the end computers, that cert has signed a wildcard cert I am trying to use for the server.

I added the pfx of the wildcard cert to the local machine personal store. From there I can use it fine for signing the RD Session Host session.

enter image description here

However when I try to set up the signature for Remote App the certificate does not show up.

enter image description here

What do I need to do to get my certificate to be available for for use?


The Certificate was generated through the following commands:

makecert -pe -n "CN=*.vw.local" -a sha1 -sky signature -ic VetWebCA.cer -iv VetWebCA.pvk -sv VetWebComputerWildcard.pvk VetWebComputerWildcard.cer

pvk2pfx -pvk VetWebComputerWildcard.pvk -spc VetWebComputerWildcard.cer -pfx VetWebComputerWildcard.pfx

The resultant pfx was added to the machine local store via mmc.

Oddly, going in to Powershell if I add the -CodeSigningCert flag to find the wildcard certificate it is excluded from the serch results for Get-Childitem in my Cert:\Local Machine\My path, but if I don't include it it is there.

share|improve this question
up vote 1 down vote accepted

It appears that Remote app requires explicit rights to use it for signing, you can not just use the <All> rights. Changing my cert generation to

makecert -pe -n "CN=*.vw.local" -a sha1 -sky signature -ic VetWebCA.cer -iv VetWebCA.pvk -sv VetWebComputerWildcard.pvk -eku, VetWebComputerWildcard.cer

solves the issue ( & are Client Authentication and Server Authentication rights)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.