edutech4schools

Would google forms do what you want. Its free, very easy to use and anyone can access if needed.

Good idea.

No SANs If I do a whois the domain = school.area.sch.uk To access server from web = vpn.school.area.sch.uk (I assume this is the external DNS) vpn.school.area.sch.uk is the SSL cert I got. How do I use this cert in my windows7 rdp connection?

Decided to remove web access interface and just use rdp session to connect to the rds gateway. How would I go about removing the ssl cert error when connecting to the windows7 machine via rdp. It says the windows7.domain.lan cert is not trusted. I recently got a new cert for the school using vpn.school.area.sch.uk, can I use this?

I did manage to connect using the above method, So why the error when doing it through the web page.

I thought the point of rdweb apps / desktop was it uses ssl port 443 from external to internal and any other ports like rdp are handled internally by IIS and mapped out to 443. Yes firewall is managed by LA but I do have port 443 forwarded.

Hi, I have been trying to get a remote desktop to work via remote desktop services (RDweb) for weeks. Each time I follow a different set of instructions I get to the same point and it errors. Internally everything works fine, I can browse to https:vpn.school.area.sch.uk/rdweb, log in, click the 'remote desktop' tab, enter 'Windows7' which is the name of the virtual pc I need remote access to click 'connect' and bingo all works. Externally I get all the way through the above steps but instead of connecting to the Windows 7 client I get the following error, I am really stuck, so any advice before I go mad.

ok the third cert is already in the trusted CA folder.

I also have a third cert ipsCAGlobal.crt which not to sure about.

Is the following that I found on-line the same location as the above post issue? and will I be ok to follow this?

Ok, more help needed. I have the certs and have imported the vpn.school.la.sch.uk.cer in to IIS. The next thing the CA company have asked me to do is import a ips.CALEVEL1CA.crt. They say to do this by double clicking the file and selecting import then put it in Intermediate Certification Authorities folder, select the underlying Local Computer folder. Firstly is this done on the IIS server? If so, why when I do this do I not see a local compute folder. Even with physical store ticked I only get registry listed.

No need for the panic. Basically the auto mailer system for the CA company pulls the standard domain which is area.sch.uk and uses that for its confirmation emails but when it comes to creating the actual cert which is checked by a human it would have come back with an whois error and they would have realised it was a UK school which needs school.area.sch.uk and the cert would have been created correctly. That's what they have said, lets see if they do send the correct cert.

Odd. When I use your link it comes back with invalid domain name but if I use this WHOIS tool | Nominet is comes back and tells me the domain is school.region.sch.uk and not region.sch.uk. can I pm you our school info?

getting excited. :0)

but in post 5 So based on the above info I need school.region.sch.uk and not simply region.sch.uk and in post 6 I seem to be getting conflicting help. No wonder so many people get confused. So who is correct?

Thanks for all the info. Just to double check I should contact the CA and get them to use school.region.sch.uk?

Sorry, I have been finding this very confusing as our LA control the firewall / ports and DNS. So have they got the domain name correct then? LocalAuthority.sch.uk

Hi, I have requested a ssl cert using CN = vpn.(school).(LA).sch.uk I have just had an email to say they are processing Domain name = (LA).sch.uk Server Name = vpn.(school).(LA).sch.uk Should I be concerned?

seen lots of schools on these forums getting free certs for schools from SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits I have also been trying to get my head round the same issue as the original posters question. The confusion for some (mainly primary schools) is they do not control the firewall / dns which is looked after by the likes of swgfl etc. My external url to get to an internal server is vpn.school.sch.uk when a user types this it is forwarded to *.*.*.5 which is our IIS server which is named server2.lan. I have just requested a cert using vpn.school.school.sch.uk for its common name. Is this correct?

Not read every post but Blockbusters were well over priced for second hand games. A few weeks back I saw Battlefield 3 (second hand) at BB for £24 in ASDA it was £10.

Thanks for you info. Are you using remote desktop services remotely? The error I am trying to avoid is - and this error In other posts the answer seems to be to have the rd gateway servername in the cert, so something like server.domain.lan, but this is not our external address and could be a load of nonsense. Could really do with clarification from someone who has this working.

Hi, When creating a new ssl cert should the fqn = school.lea.sch.uk or vpn.school.lea.sch.uk ? the vpn.school.lea.uk will be the actual addresss needed in the url bar to access the server. I am going to use this cert for remoted desktop services from home to school and have read that it is very picky and needs to be the FULL address but would like advice. NB. AN old cert that is no longer valid appears to use the vpn.school.lea.uk address.

ok found out I will need a new cert as I do not have the key file. going to create a new post for that.

Hap+ (Home access plus) from these forums for my Primary schools.

That is a good review. cheers