Background: Currently, we manage our servers through an IP KVM, but we're slooooowly migrating to VMWare ESXi. The KVM interface is clunky and user management is a little cumbersome and I'd like to keep people away from the VIC Console if possible. RDP is not allowed on our network, as all traffic must funnel through the VIC or KVM, which have certificates from an internal CA.
Question: I'm using this transition to push toward RDP for internal management of servers. I'd like to make my case for RDP, but security (even though these servers are not Internet-facing) is still a concern. I've looked at TS Gateway, but it seems that it is for Internet to remote server, not from internal client to internal server. I know this is pretty broad, and please feel free to ask for clarification, but what is the best way to securely implement RDP on internal servers.