The remote computer could not be authenticated due to problems with its security cert

[genesis]

Hi

 

We have Windows 2012 RDP server and we use a link similar as shown below to access our RDP server.

https://desktop.parkview.wales.sch.uk/Rdweb

 

The SSL certificate had expired a 2 weeks ago. I had bought the new SSL certificate from the SSl provider

There were three new certificates given by the SSL provider.

“ QuoVadisOVIntermediateCertificate.crt”

“QuoVadisOVRootCertificate.crt”

“desktop.parkview.wales.sch.uk. crt”

 

On the MMC of the RDP server- imported the QuoVadisOVIntermediateCertificate.crt to the Intermediate Certification Authorities - Certificate folder

and the QuoVadisOVRootCertificate.crt to the Trusted Root Certification Authorities- Certificate folder

and finally the desktop.parkview.wales.sch.uk.crt to the Personal store & did the site bindings .

 

If I do the RDP externally I get: The remote computer could not be authenticated due to problems with its security certificate. When investigating, On the RDP server- server manager- Remote desktop services-Tasks- Edit deployment services- Certificates-Manage certificates window- Please see the snapshot it says:

RD Connection Broker- Enable single sign on – Expired

RD Connection Broker- Publishing - Expired

RD Web access – Expired

RD Gateway-Expired.

 

So I clicked choose a different certificate and when I browse to the desktop where the new SSL desktop.parkview.wales.sch.uk. crt is located and it is looking for a DER Encoded binary X.509(*.pfx) which doesn’t exist.

Please let me know how if I am missing anything and how to sort this.

Any help would be great.

Thanks in advance

Edited February 5, 2017 by genesis

[kmount]

You can create a pfx using what you've listed plus the private key - https://www.sslshopper.com/ssl-converter.html

[genesis]

I noticed the expired certificates were in .cer format.

 

Now as i have already imported the following SSL in .crt format on the RDP server.

“ QuoVadisOVIntermediateCertificate.crt”

“QuoVadisOVRootCertificate.crt”

“desktop.parkview.wales.sch.uk. crt”

I will remove all the above certificate from the RDP server certificate store ( through the MMC) - and convert all the three certificate into .pfx and import again.

Not sure about the private key

Please correct if i am wrong \missing any thing.

Thanks

Edited February 5, 2017 by genesis

[kmount]

Hi,

 

I wouldn't worry about .cer or .crt

 

The issue is you are unable to import the cert using the RD manager - because you don't have the private key in the bundle.

 

A pfx contains the cert, chain and key together in a bundle.

 

The key will be on the server you made the CSR on.

 

Another way of doing it might be to look in the cert store you imported the new cert into, it should say whether or not you have the private key - look for this - [Windows] Certificate With A Private Key Photo by jpaugh64 | Photobucket - if you can find this and it confirms you have the private key you can export it directly into a pfx.

[genesis]

Thanks i have exported the certificate into .pfx on the server desktop

Do I need to now import the .pfx certificate into all the following as shown in the snapshot.

RD Connection Broker- Enable Single Sign On

RD Connection Broker- Publishing

RD Web Access and

RD Gateway

Thanks

Edited February 14, 2017 by genesis

[genesis]

Thanks all working now:)

Thanks you so much for your help!!!

[kmount]

Great news!