-2

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server Authentication and Client Authentication. I have an RDP Service that is not using MS Terminal Services nor 'Remote Desktop Services Manager'

I was able to get the non-IIS Service to use the cert from globalsign, so that when my users go to https:\mysite.com they get the green lock, viewing the certificate all is well.

Problem is using RDP. When I use RDP, I get a certificate warning. When I click View Certificate, it shows a self assigned cert, we will call it servername.

So I Open MMC -Add/remove snap in 'Certificates' - 'Computer Account' - Expand Remote Desktop - Certificates. In here, I have added globalsign certificate and it's information all looks correct. I have deleted the 'servername' certificate from this location.

When I attempt to RDP to the server, I get the same certificate warning. I click 'no' and do not login. When I refresh my 'Certificates' in remote desktop, the self signed 'servername' certificate re-appears.

I have tried opening Local Computer Policy\computer configuration\administrative templates\windows components\remote desktop services\remote desktop session host\security and setting the 'Server Authentication Certificate Template' name to my 'globalsign' certificate, no change. I have tried changing the name to 'RemoteDesktopComputer' as found when googling my issue - no change. Seems no matter what I try in this 'Server Auth Certificate Template" field, it doesn't matter and it will create a self assigned certificate.

Does anyone have any suggestions?

1
  • This question appears to be off-topic because it should be directed to the support department of the custom software product you're using.
    – MadHatter
    Sep 19, 2014 at 7:03

1 Answer 1

2

Is your server in setup as a Session host? Open up the session host configuration mmc, and then go to the connection properties, and select the certificate you wish to use.

session host cert settings

While you are there you can also set your 'security layer to SSL(TLS) only.

11
  • Hello - Unfortunately I cannot use the Session Host. it will conflict with the RDP software that I use and not work. If I could find that "Certificate Auto generated" options behind the scenes I think I could make it work :)
    – SSLStumped
    Sep 16, 2014 at 19:16
  • Uhm, what? Please explain that. What RDP software are you using that conflicts with using the session host?
    – Zoredache
    Sep 16, 2014 at 19:29
  • BTW, see serverfault.com/q/241961/984
    – Zoredache
    Sep 16, 2014 at 19:32
  • @Zoredache 2x RAS is building on the RDP functionality but exposing its own protocol - probably something like that.
    – the-wabbit
    Sep 16, 2014 at 19:33
  • 1
    @SSLStumped As this is a specific question regarding a rather esoteric product, you should be calling their technical support. Also, the TSPlus product site is listing "Editions" where some of them are documented not to support "HTTPS/own certificates" - so check if what you're doing is a supported configuration in your edition.
    – the-wabbit
    Sep 17, 2014 at 5:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .