Step 5: Importing the SSL Certificate on the Forefront TMG Server
Applies To: Windows Server 2008 R2
When you import the certificate, ensure that you the also import SSL certificate as a Trusted Root Certification Authority on the Forefront TMG server, TMG-SRV.
Perform the following procedure on the Forefront TMG server, TMG-SRV, to install the SSL certificate for the RD Gateway server, RDG-SRV.
To import the SSL certificate for the RD Gateway server on the Forefront TMG Server
Log on to TMG-SRV as CONTOSO\Administrator.
On the Forefront TMG server, open the Certificates snap-in console as follows:
Click Start, click Run, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
In the Add or Remove Snap-ins dialog box, in the Available snap-ins list, click Certificates, and then click Add.
In the Certificates snap-in dialog box, click Computer account, and then click Next.
In the Select Computer dialog box, click Local computer: (the computer this console is running on), and then click Finish.
In the Add or Remove snap-ins dialog box, click OK.
In the Certificates snap-in console tree, expand Certificates (Local Computer), and then click Personal.
Right-click the Personal folder, point to All Tasks, and then click Import.
On the Welcome to the Certificate Import Wizard page, click Next.
On the File to Import page, in the File name box, click Browse, and then browse to the location where you copied the SSL certificate for the RD Gateway server. From the file type drop-down list, select All Files (*.*). Select the certificate RDG-SRV.pfx, click Open, and then click Next.
On the Password page, do the following:
Type password.
Select the Mark this key as exportable. This will allow you to back up or transport your keys at a later time. check box.
Ensure that the Include all extended properties check box is selected.
Click Next.
On the Certificate Store page, click Automatically select the certificate store based on the type of certificate, and then click Next.
On the Completing the Certificate Import Wizard page, confirm that the correct certificate has been selected and that the following certificate settings appear:
Certificate Store Selected: Automatically determined by the wizard.
Content: PFX
File Name: FilePath\RDG-SRV.pfx
Click Finish.
After the certificate import has successfully completed, a message appears that confirms the import was successful. Click OK.
Right-click the Personal folder, and click Refresh.
With Certificates selected in the console tree, in the details pane, verify that the RDG-SRV.contoso.com certificate appears in the list of certificates on the Forefront TMG server.
To import the SSL certificate as a Trusted Root Certification Authority on the Forefront TMG Server
In the Certificates snap-in console, in the console tree, expand Certificates (Local Computer), and then click Trusted Root Certification Authority.
Right-click the Certificates folder, point to All Tasks, and then click Import.
On the Welcome to the Certificate Import Wizard page, click Next.
On the File to Import page, in the File name box, click Browse, and then browse to the location where you copied the SSL certificate for the RD Gateway server. From the file type drop-down list, select All Files (*.*). Select the certificate RDG-SRV.pfx, click Open, and then click Next.
On the Password page, do the following:
Type password.
Select the Mark this key as exportable check box.
Ensure that the Include all extended properties check box is selected.
Click Next.
On the Certificate Store page, verify the default option Place all certificates in the following store is set to Certificate Store: Trusted Root Certification Authorities, and then click Next.
On the Completing the Certificate Import Wizard page, confirm that the correct certificate has been selected and that the following certificate settings appear:
Certificate Store Selected: Trusted Root Certification Authorities
Content: PFX
File Name: FilePath\RDG-SRV.pfx
Click Finish.
After the certificate import has successfully completed, a message appears confirming that the import was successful. Click OK.
Right-click the Trusted Root Certification Authority folder, and click Refresh.
With Certificates selected in the console tree, in the details pane, verify that the RDG-SRV.contoso.com certificate appears in the list of certificates on the Forefront TMG server.
In the Certificates snap-in console tree, expand Certificates (Local Computer), and then click Personal.
Select Certificates in the console tree. In the details pane, double-click the RDG-SRV.contoso.com certificate.
On the General tab, verify Ensures the identity of a remote computer is displayed, and then click OK.
Close the Certificates snap-in.
You have imported the certificate and the SSL certificate as a Trusted Root Certification Authority on the Forefront TMG server, TMG-SRV. Now you can proceed to Step 6: Creating a Web Listener on the Forefront TMG Server.