Solved

Certificate error for TS WebApp Server behind TS Gateway

Posted on 2011-02-23
10
1,118 Views
Last Modified: 2012-05-11
Our SBS2008 server is properly configured with a trusted certificate. We have set up a second server 2008 machine running TS WebApps. We have also published a couple RDP links to the RWW web site using the guides created by Microsoft.

When a user logs into the RWW and clicks the link to launch the Remote WebApp it prompts them for their credentials to the terminal server but then throws the error about the certificate to the LOCAL name of the TS Web Apps server and prevents the connection.

How do i set up a certificate for a local machine to allow the rdp connection to pass through? Or is something setup incorrectly?

 error
0
Comment
Question by:JSorensen
  • 4
  • 4
10 Comments
 

Author Comment

by:JSorensen
Comment Utility
PS when attempting to connect from Windows Vista i don't see the error. It's my users using Windows 7 that can't connect
0
 
LVL 38

Expert Comment

by:Philip Elder
Comment Utility
By default we do not touch the certificate structure on the TS/RDS box other than to specify the RWW/RWA URL as the TS/RDS Gateway pointer.

Normally there is a check box on that warning that we can check to "Don't Bug Me" again about that.

Have changes been made to the certificate setup on the TS/RDS box?

Philip
0
 

Author Comment

by:JSorensen
Comment Utility
our TS Gateway/SBS box has the certificate installed for our public dns name and works great for OWA/RWW/TS Gateway, etc.

The rdp files are set to use the TS Gateway to connect through back to the local name of the TS Web App server.

The TS WebApp terminal server itself is NOT exposed directly to the internet. Just our SBS box with the RDP links.
0
 
LVL 38

Accepted Solution

by:
Philip Elder earned 500 total points
Comment Utility
Yes, that is how we have all of our TS/RDS setups running through SBS 08/11's TS/RDS Gateway.

The certificate warning always comes up on first connection but it allows us to ignore it going forward.

Philip
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 38

Expert Comment

by:Philip Elder
Comment Utility
The following may help:

Logon using the following structure:

Domain\FirstLast
My crazy l0ng pass phrase!

Users can check the Save Credentials but that will only apply for the Gateway depending on how the GPO security structures are set up.

Philip
0
 

Author Comment

by:JSorensen
Comment Utility
The authenticate to the Gateway just fine. That certificate works. It prompts them for the certificate for the machine BEHIND the gateway. If I manually change the "authentication:i" property from

authentication:i:2 to authentication:i:1 it will allow me to suppress the warning about the certificate and continue on. I would just rather not see the message at all.

Is there some kind of certificate i need to auth between the sbs08 box and the server 2008 box?
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
Comment Utility
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
 
LVL 38

Expert Comment

by:Philip Elder
Comment Utility
To answer your last question, "No".

On first connection by a remotely connecting system there will always be two certificate warnings.

Philip
0
 

Author Comment

by:JSorensen
Comment Utility
confirmed accept #34964169
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Imagine a situation that you have installed SSL (http://en.wikipedia.org/wiki/Secure_Sockets_Layer) Certificate on your Cisco ASA (Cisco Adaptive Security Appliance) firewall. Installation of SSL certificate on ASA is an another topic for which you …
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now