Solved

SBS 2011 - TS Gateway / Remote Desktop Certificate Mismatch Failure

Posted on 2012-04-04
2
2,555 Views
Last Modified: 2012-04-05
Please bear with me as I was recently supporting a SBS server already setup. What I do know is that company is using mail.contoso.com certificate from GoDaddy that is used for seemingly all of there certificates against the server. Remote.contoso.com was issued by server-CA for the Terminal Gateway. Everything works fine and resolves to proper mail or remote.contoso address. Problem is when I enter the RWA portal, of which I can do no problem with certificate mismatch which is pulling the mail.contoso.com certificate. When I try to launch remote connection to PC its giving me "Your computer can't connect to the remote computer because the Remote Desktop Gateway server address requested and the certificate subject name do not match. Contact system admin." If I go and change the certificate on the RD Gateway Manager to remote.contoso.com obviously this works fine. No mismatches and I can continue to go to Public/Downloads/Install Cert. Download and install on client and RDP works fine. Only problem is that the Exchange hosted on the same server with the mail.contoso.com will then give all the client Outlook users certificate errors as its pulling remote.contoso.com now instead of mail.contoso.com. SO..how can I get the TS Gateway to just use remote and the mail to use mail? Is there anything I could do with DNS but Im thinking it will still have a cert mismatch. This has been very frustrating to say the least and TIA for any assistance!
0
Comment
Question by:iacovetti72
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 35

Accepted Solution

by:
Cris Hanna earned 500 total points
ID: 37809397
SBS wizards are not designed to support multiple host names for SSL certs
OWA/Outlook Anywhere and RWA are in the same IIS site

The simple solution here is configure outlook anywhere to use remote.contoso.com

The other option is to re-run the Setup My Internet Address Wizard, select I have a domain name, select I want to manage it myself
When you get to the portion that says, enter Domain Name, click on the work "Advanced" under the text box
change Remote to mail, click ok, enter domain name and finish the wizard

Can you now connect to RWA and to the desktops with the https://mail.contoso.com/remote ?
0
 

Author Closing Comment

by:iacovetti72
ID: 37813117
Since SBS 2011 has the limitation I went ahead and just used remote. and is working as normal. Thanks for your insight, as thats exactly what I was going to do but wanted to see if I could do something else.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question