I need to RDP into multiple machines behind an external static IP. The method I'm using is to port forward selected ports to a target IP:3389. E.g.
forward 100.110.120.130:10001 to 192.168.1.101:3389
forward 100.110.120.130:10002 to 192.168.1.102:3389
etc...
Which works fine. But now I want to use SSL/TLS and secure the RDP sessions. I can use the RDP server auth certificate from the host machine and install it into the client machine trusted root CA store, however the name of the RDP host does not match the external IP address and I get a certificate error.
The external IP is static and won't change, but the port changes necessarily. So, can I use a wildcard certificate and map the static IP to a subdomain, and continue to use port forwarding in this way without encountering a certificate error?
Thank you all...