Securing RDP with SSL certificate

[EduardoLn]

Good morning (and sorry for my English),

Is possible to use a SSL certificate from a trusted entity for RDP connections? Some customers complains about the warning message that appears when they try to connect indicating that the certificate can not be verified.

I have my SSL certificate (wildcard) installed computer's certificate store, even in the "Remote Desktop" group, but always use a self-signed certificate with the computer name when connecting.

Any help is welcome.

[juwagn]

Hello,

yes, that is possible, but actually it has to be done manually only.
http://support.tsplus.net/kb/faq.php?id=54

[EduardoLn]

Hello juwagn,
I followed the steps indicated in the FAQ and it worked perfectly.

No more complaints for this reason!

Thanks!!

[jeffers1974]

You can also do this from the Remote Desktop Session Host Configuration MMC snap in (even where you dont have full RDS installed). This also allows to to ensure TLS is selected. You should also use a tool like IISCrypto to turn off insecure algorithms and TLS 1.0 and older which are known to be insecure as well as setting the TLS setting from within TS Plus. Very important if you need to worry about PCI compliance.

[cillian]

Thanks for the link, juwagn!