We run a Remote Desktop Services Sever 2008 R2 environment here for our remote access
4x RD Host Servers
1x RD Session Broker Server
1x RD Gateway Server
On each of the session host servers and broker, we have internal certificates, say
On the gateway server we have a purchased SSL certficate which is bound to say gateway.companyname.com
As you can see they are different, our internal domain name is slightly different from our external.
Anyway when trying to get a Windows 7 client to open the remote desktop client (mstsc.exe) and connect in, using the gateway we get back with an error after providing our username and password saying
"The certificate revocation check could not be performed for the certificate" and does not let us any further, I have tried clicking view certificate and installing it into the "Trusted Root Authorities" store but still no go
The interesting thing is the name of the certificate is coming from the server name, ie, the latest attempt to connect had a certificate name of server1.internaldomainname.com
I thought the certificate was supposed to come from the external ssl one we purchased ?
Others have mentioned that for this to work i need to publish our my CRL
Can anyone elaborate on this?