Hello,
We are trying to setup RDS to allow users to connect to a Remote Desktop Server both internally as well as external.
However when the gateway/broker is redirecting the user to the session host we get a certificate warning. Depending on the config it is either a untrusted certificate (the self-signed cert) or a name mismatch (.local domain <> public domain name)
Environment details:
- All Windows 2012 servers
- 2 servers running RD Gateway, RD Connection Broker and RD Web Access in HA
- Gateway and Web Access is setup as HA using NLB with a dedicated NIC.
- Broker is setup as HA using DNS Round Robin.
- Internal DNS name for Gateway has been added to internal DNS. Public DNS also published.
- We have bought a wildcard certificate from a trusted CA and applied it to all roles (GW, CB SSO, CB Pub., WA) and gateway manager. All show as Trusted and OK.
What I have already tried:
- Used TP's powershell script to change the published FQDN.
- Used a WMI script to input the certificate for the Session Host (SSLCertificateSHA1Hash in the registry).
- Used a MS Fixit that seems to do the same as the WMI script.
- Used the Set-RDSessionCollectionConfiguration powershell command to modify the CustomRdpProperty of the session collection with "use redirection server name:i:1 `n alternate full address:s:broker.domain.com".
I'm testing with Windows 7 machines that have version 6.3.9600 of mstsc installed. Shows RDP 8.1 supported.
My home machine running Windows 10 is having the same issues.
Some of these solutions seem to work at first as the certificate error disappears, but after a while it comes back.
Don't know what I'm missing here as these solutions seem to have helped people with this particular issue already.
Thanks for the input.
Kind regards,
Dennis