Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,504 questions
Updated SSL Certs for RDS with gateway and some users are getting errors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 83%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Ben
21
Reputation points
hi,
so, we have an external facing rds gateway, and the certificate was about to expire so i replaced the certificate in the rds deployment settings as well as the rds gateway manager mmc console. however some users (on win 7 and osx), the error doesnt seem to appear for windows 10 users are getting a server name mismatch as the url on the certificate does not match the broker name
first screenshot is what users get on win 7 and similarly worded on mac osx second is the only popup that comes with windows 10
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 30%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEY%3C/text%3E%3C/svg%3E)
Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,746 Reputation points Microsoft Vendor2020-11-17T03:56:18.707+00:00 Hi,
Could you please share a overview of your RDS deployment?
Are problematic Windows 7 PC and osx PC domain joined or workgroup member? How about Windows 10?
-
Ben 21 Reputation points
2020-11-17T08:04:30.07+00:00 so, have 1 gateway with the roles on it for broker and rdweb etc and then a few session hosts,
the devices are computers outside of the internal infrastucture
-
Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,746 Reputation points Microsoft Vendor
2020-11-18T03:23:46.873+00:00 Hi,
Is the SSL certificate a public one?
And is there any working windows 7 pc or all windows 7 pc have the issue?
-
Ben 21 Reputation points
2020-11-18T08:16:09.957+00:00 Hi, Yes it is one from a public trusted authority, the gateway and the external fqdn are diferent though (the certificate is in the fqdn)
-
Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,746 Reputation points Microsoft Vendor
2020-11-19T04:08:38.49+00:00 Please correct me if my understanding is wrong.
The gateway, rdweb, rdcd roles are installed on the same server. It has an internal domain name (such as xxx.rds.local) as well as an external FQDN which is the certificate issued to.
Please check below settings on the problematic machines.
- If NLA has been enabled
- If gateway server name has been set to the external FQDN in the certificate.
- Please compare the certificates between the problematic machines and working machines.
Sign in to comment
Sign in to answer