RDS Gateway SSL Error

Question

Hello All,

I keep getting the following error on my 2019 Server (version 1809) Remote Desktop Services:

The Remote Desktop Gateway service does not have sufficient permissions to access the Secure Sockets Layer (SSL) certificate that is required to accept connections. To resolve this issue, bind (map) a valid SSL certificate by using RD Gateway Manager. For more information, see "Obtain a certificate for the RD Gateway server" in the RD Gateway Help. The following error occurred: "2148081668".

I've tried removing and adding the gateway role and I've tried selecting the cert I created through the gateway manager and I still

get this error...Any help would be appreciated!

Thank you

Answer 1

Hi,

Please kindly provide a simple clarification on your RDS deployment. Is there any other RDS role installed in your environment, like RDCB role?

For the error you got, please try below steps for troubleshooting:

1. You need to ensure the SSL certificate is created correctly. You can refer to Using certificates in Remote Desktop Services or SSL certificate part in below blog for detailed steps. https://nedimmehic.org/2017/02/08/how-to-install-remote-desktop-services-2016-quick-start-deployment/
2. Ensure that the required permissions are granted to the private key of the SSL certificate. More details: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc775286(v=ws.10)?redirectedfrom=MSDN
3. If you have RDS deployment, you can also try to install the certificate in the RDS deloyment on the RDCB server.
   
   

Also, you can read the following blog for more configurations on RD Gateway.
https://nedimmehic.org/2018/03/26/remote-desktop-services-2016-gateway/

Thanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

Hi,

Glad to know your RDS deployment is up and running. Please kindly help to click "Accept Answer" and upvote it if the answer is helpful.

And for your second question, only Per-Device cal has temporary license. So, your RDS licensing mode is per device, right?
If so, it is a normal behavior that the server gave the Windows 7 client a temporary 90 day cal when it is the first time to connect to the RDS server. When this client connect to the RDS server next time, the licensing server will update the CAL to a permanent CAL for this client.

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 3

Thank you..This helped get us up and running, but now we have a new issue.

A Windows 7 client connected to the server and the server gave out a temporary RDS license. This person is the first to connect to the server so there are plenty of licenses available. Any idea why it would give out a temp license when there are licenses available?

Thank you.

Answer 4

Great..thank you again!