RD Gateway Endpoint PC Certificate

-

i'm setting first rd services deployment, , have question remote (internet) connections gateway.

i have certificate major ca external domain name authenticates gateway without issue, connection hops endpoint [workstation/rd session host] presents self-signed certificate , warning issued untrusted certificate.

what correct answer here?  i can't obtain major ca alternate name each end-point remote user's pcs trust, , i'd rather not have install certificates on home pcs.

is gateway authenticating endpoint's cert , passing warning end user, or end user's pc authenticating both gateway , endpoint pc?

what certificate setup should use here?

hi,

what operating system versions running on rd gateway, rdsh servers, workstation endpoints?

how plan have end users connect in?  example, manually going set rd gateway in remote desktop connection, or use connect remote pc tab in rd web access, or else?

it depends on how have things configured, client version, etc., if manually connecting directly pc outside client authenticates rdg using certificate, authenticates endpoint using endpoint's certificate.  1 way can handle have wildcard cert public authority assigned on internal pcs , use split dns if necessary.

-tp



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)

-
hi we in process of migrating win 2003 ad win2008 r2. when noticed logs found many errors , warning alerts ca below --could not connect active directory. certificate services retry when processing requires active directory access. (event id 91)----certificate services sagia ca can not open certificate store @ cn=ntauthcertificates,cn=public key services,cn=services in active directory's configuration container. (event id 94, warning)--                                                                                            ...
Read more

Windows server 2012 r2 inplace upgrade failed

-
trying upgrade windows server 2012 2012r2 on physical box/nas (hosting vm's). this failed due "unknown error"? there several error logs, first few lines of 1 attached: setuperr.og (from c:\$windows.~bt\windows) 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user nt service\mssql$microsoft##wid. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user iis apppool\classic .net apppool. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:26:23, error      [0x0808fe] mig    plugin {0b23c863-4410-4153-8733-a60c9b1990fb}: loadlibraryex error (c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-textservicesframework-migration\imjpmig.dll) gle=126 2013-10-06 14:26:23, error      [0x0808fe] mig  ...
Read more

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

-
looking options resolve error , prevent in future. thanks help. hardware: 2 node dell hv cluster running2012r2 dc 8 nic/ea in multiplex mode 4x hyper-v 4x hosts storage: 2x synology nas, accessed through iscsi hosts , cluster relevant logs: log name:      microsoft-windows-failoverclustering/diagnostic source:        microsoft-windows-failoverclustering date:          event id:      2050 task category: none level:         warning keywords:       user:          system computer:      l description: [dcm] filter wimmount found @ unsafe altitude 180700 log name:      system source:        microsoft-windows-failoverclustering ...
Read more