cert request - common name = ????? for remote desktop services HELP

[edutech4schools]

Hi,

 

When creating a new ssl cert should the fqn = school.lea.sch.uk or vpn.school.lea.sch.uk ?

 

the vpn.school.lea.uk will be the actual addresss needed in the url bar to access the server.

 

I am going to use this cert for remoted desktop services from home to school and have read that it is very picky and needs to be the FULL address but would like advice.

 

NB. AN old cert that is no longer valid appears to use the vpn.school.lea.uk address.

[synaesthesia]

We do have our certificate for our VPN on the full domain name - i.e. vpn.school.lea.sch.uk but it would/should also work on a domain wide SSL certificate (school.lea.sch.uk)

We only made one for the VPN as we'd forgotten we had a domain wide one! It doesn't particularly hurt to do it for each machine but it depends on the certificate provider.

[edutech4schools]

Thanks for you info.

 

Are you using remote desktop services remotely?

 

The error I am trying to avoid is -

 

THIS COMPUTER CAN'T CONNECT TO THE REMOTE COMPUTER BECAUSE THE TERMINAL SERVICES GATEWAY SERVER ADDRESS REQUESTED AND THE CERTIFICATE SUBJECT NAME DO NOT MATCH.

 

and this error

 

Remote Desktop can't find the computer name . This might mean that name does not belong to the specified network. Verify the computer name and domain that you are trying to connect to.

 

In other posts the answer seems to be to have the rd gateway servername in the cert, so something like server.domain.lan, but this is not our external address and could be a load of nonsense.

 

Could really do with clarification from someone who has this working.

[synaesthesia]

Yes we are. Make sure the rdp file you use has all the external addresses and not internal. Also check the ssl cettificates in iis and the one in the remote gateway services manager are all external and not the internallygenerated one. On topof which check port 3389 is available.