SSL Certificates for MS VDI

[owen1978]

I have finally setup and configured a Microsoft VDI environment, initial test are encouraging!

So will look to move to it next year from VDIAB.

 

The question I have is regarding SSL Certificates, how many do I need?

Let me break it down...

 

External users will be accessing the desktops via RD Web Access

Internal users will be accessing it via a custom made web page with an RDP file linked to it

 

What I want to achieve is a seamless login, as in no warnings about certificates, site not trusted etc...

The RD Web Server & the RD Connection broker are on the same server.

My gut feeling is that I need two SSL Certificates

 

Also as a follow up question, what/who does the certificate need to be issued to

 

Our external domain name is registered and managed by our LEA

 

For the RD Connection broker I assume it needs to be issued to the internal server e.g. rds.schooldomain.pri

while for the RD Web Access, issued to the external domain ... rdweb.external_domain.sch.uk

[gshaw]

You may need to change the RD Published Name setting to get around this, had to do something similar with ours https://gshaw0.wordpress.com/2017/02/02/server-2016-rds-via-azure-ad-application-proxy-end-to-end-guide/

[owen1978]

Just did some reading up and realised that I need to install the RD Gateway service in order to enable external connections

Which makes things a bit more confusing so it now 3, 2 or 1 certificate I need?

[Scrambles]

We just use one wildcard certificate to cover everything.

We also use the Web Application Proxy to reverse connections to our gateway. Seems to all be working a-okay at the moment.

gshaw is right with changing the RD Published Name. That stops the certificate errors when connecting externally.

[gshaw]

As above just one wildcard cert covering your external domain should do the trick