To start deploying certificates launch Server Manager, click on Remote Desktop Services and from the Deployment Overview section choose Tasks > Edit Deployment Properties. If you don’t have external clients, then using an internal CA will work just great since these certificates are automatically trusted by all the clients in the company. In this case it is recommended to use a certificate issued from a public Certification Authority and the FQDNs be part of the certificate. For those clients that are not part of the company you will need to put at their disposal a public FQDN to connect in order to launch their applications. One thing to keep in mind are the FQDNs you put in the certificate. I will use the term certificate from now on since I’m going to use a SAN certificate for my RDS infrastructure.
INSTALL AND CONFIGURE TERMINAL SERVER WINDOWS 2012 R2 INSTALL
Off course, you will not use this wizard for troubleshooting because it’s useless in this matter, but is perfect for what we need now because we don’t have to log in on every server to install the certificates.īefore we move forward, I trust you already have the certificate(s) purchased from a public authority or issued from an internal CA. There are multiple ways to install certificates in Remote Desktop Services, but in this article we are going to use the wizard that comes with this role since it’s a central console for all the servers in the RDS Infrastructure. Now as a certificate requirement we only need a web certificate type and I will recommend you go for a SAN certificate or a wildcard one just so you don’t get lost in a bunch of certificates easier management. local domain with Remote Desktop Services. Also, by using a public certificate, you will also be able to see the problems that arise from using a. If you have clients that are not part of the organization, I will go and buy a certificate form a public Certification Authority. I don’t recommend the first option not even in labs, but the other two, work well in production. Here we have three options: we either use self-signed certificates, an internal enterprise Certification Authority or a public Certification Authority. In order to make it easier for those clients to connect, we as administrators have to configure these services as smooth and transparent as possible, and to secure them, we will use as you might guessed…certificates. Nowadays, IT security it’s a serious deal, and Remote Desktop Services is no exception especially if there are external clients connecting to the infrastructure.
0 kommentar(er)
