self signed cert for remote gateway. Do I need to purchase one?

[edutech4schools]

Most of the primary schools I look after have a purchased cert for remote desktop services / gateway, but today I installed RDS using a self created cert and all works as expected.

 

I have had to import the cert into the trusted cert on my test laptop for it to connect and have locked down access to specific users. Any computers need to be domain computers and only users with my connection profile can connect.

 

So my question is, do I really need to purchase a cert?

[edutech4schools]

 

I really no nothing about certificates. Is their a security issue if I continue to use a self signed cert?

[FN-GM]

No a security issue, but you will get problems if your connecting using machine without the trusted cert installed. Are external devices going to be using the service IE staff personal machines?

[edutech4schools]

No, the staff are going to be required to use the school supplied laptop to remotely access the server.

[FN-GM]

Should be ok then. We have our own CA for internal services.

 

Our remote access can be used on personal devices, so we use a real world SSL.

 

Thanks