I have Windows Server 2012 at Amazon EC2 in non-domain environment.
I need to remote desktop into it and also connect to Microsoft SQL server instance running on it.
In addition to opening these ports in Windows Firewall I'd like to make that more secure. I can't limit connection to specific IP because I have dynamic IP address from my ISP.
What I was thinking about is to use something that would exist both on my client computer and on the server as a required condition for connection. Perhaps some kind of SSL certificate?
I found this for Windows Server 2003:http://www.alkia.net/index.php/faqs/106-how-to-secure-remote-desktop-connections-using-tls-ssl-based-authentication which seems to be similar to what I am looking for but it assumes Active Domain environment is in use and only covers remote desktop as opposed to any connection via firewall. Plus GUI for Terminal Services Configuration doesn't even exist on Windows Server 2012.
I see that in Windows Server 2012 on "General" tab of any firewall rule there is an option "Allow the connection if it is secure" that can be enabled and further configured. There is also"Connection Security Rules" folder under "Windows Firewall with Advanced Security". I suspect what I am looking for is related to these 2 options but I am not sure how they work together.
Is what I am trying to achieve even possible in non-domain environment? Are there any step-by-step guides on how to set it up for Windows Server 2012?