RDP- Certificate error

Question

Hi Team,

I have the following RDP error when RDPing into machine.

The Machine has a valid certification. However, when i click on view certifcate

Under the certifcation Path , i do not see the root CA

The Root CA is under the trusted root CA.

Any idea why the cert does not have the chain to the root CA ?

TIA

Answer 1

Hi,

Whether you use certificate issued by the internal CA or public CA, you will need to follow the steps in below artcicle to configure Remote Desktop listener certificate to resolve the error.

Remote Desktop listener certificate configurations
https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/remote-desktop-listener-certificate-configurations

In summary, all what you need to do are as below:

1. Follow @v-itcarr 's instructions to issue a certificate from a template using your CA
2. Configure Remote Desktop listener certificate on your RDS server as per above link
3. In domain environment, you can use GPO to distribute the certificate to the clients. In workgroup environment, you need to import the certificate to the client's Trusted Root Certification Authorities (mmc>Certificates (local computer)>Trusted Root Certification Authorities>Certificates)

Thanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

I have a CA in my environment.

All my machines when doing RDP has this error.

Do i have to implement the steps that you have shared on the link to remove this error (or Have the Chain from the Root CA)

TIA
Umaish

Answer 3

No chain means that is a self-signed certificate.
Try by installing that certificate under the Trusted Root Certification Authorities store.

Do you have a Certification Authority (CA)? Try this: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn781533(v=ws.11)?redirectedfrom=MSDN