Drew McCurdy
asked on
How to correctly apply RDS certificate.
Client computers receive "Do you trust the publisher of this remote connection" when attempting to connect to Connection Broker.
I have a Windows 2016, 4-server terminal services system configured as follows (NOTE: There is no Gateway configured)
Server 1 = Connection Broker, Licensing, and Web Access.
Server 2 = Session Host
Server 3 = Session Host
Server 4 = Profile host
A wildcard certificate *.domain.local has been issued by an Internal CA and installed on all servers. The certificate has been imported into RDS binding with all roles as shown in screenshot. Created certificate using https://dilanweerasinghe.w
The .RDP file has been signed with the Thumbprint (Sha1) of the certificate.
I have populated the following GPO with the cert's thumbprint and have verified that client computers have been successfully updated. Computer Configuration\Administrati
I have a Windows 2016, 4-server terminal services system configured as follows (NOTE: There is no Gateway configured)
Server 1 = Connection Broker, Licensing, and Web Access.
Server 2 = Session Host
Server 3 = Session Host
Server 4 = Profile host
A wildcard certificate *.domain.local has been issued by an Internal CA and installed on all servers. The certificate has been imported into RDS binding with all roles as shown in screenshot. Created certificate using https://dilanweerasinghe.w
The .RDP file has been signed with the Thumbprint (Sha1) of the certificate.
I have populated the following GPO with the cert's thumbprint and have verified that client computers have been successfully updated. Computer Configuration\Administrati
Last Comment
David Johnson, CD
The publisher must be in your list of trusted publishers.
ASKER
Per your suggestion, I added the certificate via GPO Configuration\Windows Settings\Security Settings\Public Key Policies\Trusted Publishers. Policy was successfully applied to all servers and test client machine (evident by screenshot below), but still now working. Is there some other "list of trusted publishers" that needs to be updated?
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Windows OS
This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.
129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
