Link to home
Start Free TrialLog in
Avatar of wahrani16
wahrani16

asked on

Configure RDS 2012 Access with certificates

Hello,

I have installed :

3 RDS 2012 Servers

- SRV-RDS1.test.local
- SRV-RDS2.test.local
- SRV-RDS3.test.local

2 Brokers
- SRV-BROKER1
- SRV-BROKER2

1 SQL Server
- SRV-SQL

1 RD web and RD Gateway on same server

- SRV-RDSGW
When I connect from local I use the name farm.test.local to connect to brokers who redirect me to RDS1 RDS2 or RDS3. All works good.

Now I am fighting to configure certificate and I need some help please.

I would like to connect to farm trough the RD Gateway.

I'd like to use the external name : farm.test.com

How many certificates I need ?

I heard about the certification authority doesn't deliver certificate for . local domains.


Thank you very much.
Avatar of bmurray-vb
bmurray-vb

1 Certificate, if you are using farm.test.com and do not create an internal authoritative DNS zone then even when on the inside of the network, machines will connect to the external name (which I assume you will NAT through a firewall of some kind).   A simple name certificate is all that is required, requested by, and installed on the RD Gateway server through IIS.
Avatar of wahrani16

ASKER

Hi thank you for your help. I will try to explain my problem.

Actually here's what I have in the certificate rds settings :
the CN is farm.test.com
 User generated image
a csr was generated from the rd Gateway server (on IIS) for the common name farm.test.com
I have used startssl certificate authority and I have placed the answer it in the rd Gateway settings :
 User generated image
Actually when I try to connect to RD Gateway ans specify farm.test.com, I can connect but I have a lot of warnings :
1st one concern the name farm.test.local (it's the dns name for the RR for brokers)
User generated image2nd one concern the name of the connection broker itself SRV-BROKER1.test.local

3rd one concern the name of one of the RDS Servers for example SRV-RDS1.test.local

after click on Yes and connection, I am able to access to the remote desktop.

- I think that it's a certificate issue for SSO etc .... Maybe Need a wildcard certificate ?
- I have read a lot of document but I am not familiar with wilcard certificate ?
- Will I use a an internal authority to protect the local domains ?

Thank you very much and to summon up one's patience
sorry for my English too :)
Avatar of Ryan Mangan
Hi, have a look at the following article which shows how to configure Certificate services for RDS 2012:

http://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/ 

You can use certificates from a internal certificate authority if you have one or a third party.

Best regards,

Ryan
ASKER CERTIFIED SOLUTION
Avatar of wahrani16
wahrani16

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Found by myself.
Regards,