SSL and Remote Desktop

  • Thread starter Thread starter Sam Ramsey
  • Start date Start date
S

Sam Ramsey

Hi, I am trying to install a SSL certificate for Remote Desktop. I installed
the Microsoft’s Certificate Services and since the computer is not part of a
domain, the only option I had to install the CA as is stand alone. So
everything went fine that.

However, when I’m in the certificate mmc and I try to request new
certificate, I do not have the choice “request certificateâ€. The choice does
not exist.

I have set this up on my domain and have no problems, however on this stand
alone computer, I am unable to request certificate and get the SSL installed
for Remote Desktop.

Thanks,

Sam
 
You can only use the certificate wizard to request certificate from domain
joined enterprise CAs.
Brian

"Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
> Hi, I am trying to install a SSL certificate for Remote Desktop. I
> installed
> the Microsoft’s Certificate Services and since the computer is not part of
> a
> domain, the only option I had to install the CA as is stand alone. So
> everything went fine that.
>
> However, when I’m in the certificate mmc and I try to request new
> certificate, I do not have the choice “request certificateâ€. The choice
> does
> not exist.
>
> I have set this up on my domain and have no problems, however on this
> stand
> alone computer, I am unable to request certificate and get the SSL
> installed
> for Remote Desktop.
>
> Thanks,
>
> Sam
>
 
Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
computer? A computer in a workgroup?

Thanks,

Sam

"Brian Komar (MVP)" wrote:

> You can only use the certificate wizard to request certificate from domain
> joined enterprise CAs.
> Brian
>
> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
> > installed
> > the Microsoft’s Certificate Services and since the computer is not part of
> > a
> > domain, the only option I had to install the CA as is stand alone. So
> > everything went fine that.
> >
> > However, when I’m in the certificate mmc and I try to request new
> > certificate, I do not have the choice “request certificateâ€. The choice
> > does
> > not exist.
> >
> > I have set this up on my domain and have no problems, however on this
> > stand
> > alone computer, I am unable to request certificate and get the SSL
> > installed
> > for Remote Desktop.
> >
> > Thanks,
> >
> > Sam
> >
>
>
 
you have to request an ssl certificate using the certificate services web
enrollment pages.
Brian
"Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
news:7DB4F24B-A641-40E7-8C9A-0244DDC99F0E@microsoft.com...
> Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
> computer? A computer in a workgroup?
>
> Thanks,
>
> Sam
>
> "Brian Komar (MVP)" wrote:
>
>> You can only use the certificate wizard to request certificate from
>> domain
>> joined enterprise CAs.
>> Brian
>>
>> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
>> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
>> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
>> > installed
>> > the Microsoft’s Certificate Services and since the computer is not part
>> > of
>> > a
>> > domain, the only option I had to install the CA as is stand alone. So
>> > everything went fine that.
>> >
>> > However, when I’m in the certificate mmc and I try to request new
>> > certificate, I do not have the choice “request certificateâ€. The choice
>> > does
>> > not exist.
>> >
>> > I have set this up on my domain and have no problems, however on this
>> > stand
>> > alone computer, I am unable to request certificate and get the SSL
>> > installed
>> > for Remote Desktop.
>> >
>> > Thanks,
>> >
>> > Sam
>> >
>>
>>
 
I cant do that becuase we are apache instead of IIS. Any other suggestions?

Thanks,

Sam

"Brian Komar (MVP)" wrote:

> you have to request an ssl certificate using the certificate services web
> enrollment pages.
> Brian
> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> news:7DB4F24B-A641-40E7-8C9A-0244DDC99F0E@microsoft.com...
> > Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
> > computer? A computer in a workgroup?
> >
> > Thanks,
> >
> > Sam
> >
> > "Brian Komar (MVP)" wrote:
> >
> >> You can only use the certificate wizard to request certificate from
> >> domain
> >> joined enterprise CAs.
> >> Brian
> >>
> >> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> >> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
> >> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
> >> > installed
> >> > the Microsoft’s Certificate Services and since the computer is not part
> >> > of
> >> > a
> >> > domain, the only option I had to install the CA as is stand alone. So
> >> > everything went fine that.
> >> >
> >> > However, when I’m in the certificate mmc and I try to request new
> >> > certificate, I do not have the choice “request certificateâ€. The choice
> >> > does
> >> > not exist.
> >> >
> >> > I have set this up on my domain and have no problems, however on this
> >> > stand
> >> > alone computer, I am unable to request certificate and get the SSL
> >> > installed
> >> > for Remote Desktop.
> >> >
> >> > Thanks,
> >> >
> >> > Sam
> >> >
> >>
> >>
>
>
 
Buy a certificate.
Sorry, you are providing very few details about your environment.
Typically, if you create a standalone CA, you would potentially have the web
enrollment pages.
Brian
"Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
news:850605BA-0D5E-42D8-BF9D-6F1978DA0499@microsoft.com...
>I cant do that becuase we are apache instead of IIS. Any other suggestions?
>
> Thanks,
>
> Sam
>
> "Brian Komar (MVP)" wrote:
>
>> you have to request an ssl certificate using the certificate services web
>> enrollment pages.
>> Brian
>> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
>> news:7DB4F24B-A641-40E7-8C9A-0244DDC99F0E@microsoft.com...
>> > Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
>> > computer? A computer in a workgroup?
>> >
>> > Thanks,
>> >
>> > Sam
>> >
>> > "Brian Komar (MVP)" wrote:
>> >
>> >> You can only use the certificate wizard to request certificate from
>> >> domain
>> >> joined enterprise CAs.
>> >> Brian
>> >>
>> >> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
>> >> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
>> >> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
>> >> > installed
>> >> > the Microsoft’s Certificate Services and since the computer is not
>> >> > part
>> >> > of
>> >> > a
>> >> > domain, the only option I had to install the CA as is stand alone.
>> >> > So
>> >> > everything went fine that.
>> >> >
>> >> > However, when I’m in the certificate mmc and I try to request new
>> >> > certificate, I do not have the choice “request certificateâ€. The
>> >> > choice
>> >> > does
>> >> > not exist.
>> >> >
>> >> > I have set this up on my domain and have no problems, however on
>> >> > this
>> >> > stand
>> >> > alone computer, I am unable to request certificate and get the SSL
>> >> > installed
>> >> > for Remote Desktop.
>> >> >
>> >> > Thanks,
>> >> >
>> >> > Sam
>> >> >
>> >>
>> >>
>>
>>
 
well...

Create a REQEUST file using INF file on your machine, take that to CA, and
CA must have interface to generate certificates from request files.

Refer following URL for INF file syntax etc.
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/advcert.mspx
--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~
"Chance Favors The Prepared Mind"
~~~~~~~~~~~~~~~~~~~~~~~


"Brian Komar (MVP)" wrote:

> Buy a certificate.
> Sorry, you are providing very few details about your environment.
> Typically, if you create a standalone CA, you would potentially have the web
> enrollment pages.
> Brian
> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> news:850605BA-0D5E-42D8-BF9D-6F1978DA0499@microsoft.com...
> >I cant do that becuase we are apache instead of IIS. Any other suggestions?
> >
> > Thanks,
> >
> > Sam
> >
> > "Brian Komar (MVP)" wrote:
> >
> >> you have to request an ssl certificate using the certificate services web
> >> enrollment pages.
> >> Brian
> >> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> >> news:7DB4F24B-A641-40E7-8C9A-0244DDC99F0E@microsoft.com...
> >> > Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
> >> > computer? A computer in a workgroup?
> >> >
> >> > Thanks,
> >> >
> >> > Sam
> >> >
> >> > "Brian Komar (MVP)" wrote:
> >> >
> >> >> You can only use the certificate wizard to request certificate from
> >> >> domain
> >> >> joined enterprise CAs.
> >> >> Brian
> >> >>
> >> >> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
> >> >> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
> >> >> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
> >> >> > installed
> >> >> > the Microsoft’s Certificate Services and since the computer is not
> >> >> > part
> >> >> > of
> >> >> > a
> >> >> > domain, the only option I had to install the CA as is stand alone.
> >> >> > So
> >> >> > everything went fine that.
> >> >> >
> >> >> > However, when I’m in the certificate mmc and I try to request new
> >> >> > certificate, I do not have the choice “request certificateâ€. The
> >> >> > choice
> >> >> > does
> >> >> > not exist.
> >> >> >
> >> >> > I have set this up on my domain and have no problems, however on
> >> >> > this
> >> >> > stand
> >> >> > alone computer, I am unable to request certificate and get the SSL
> >> >> > installed
> >> >> > for Remote Desktop.
> >> >> >
> >> >> > Thanks,
> >> >> >
> >> >> > Sam
> >> >> >
> >> >>
> >> >>
> >>
> >>
>
>
 
If you don't want to use the certificate Web pages, you can use the (less
friendly) certreq.exe command line tool.

This article is not exactly about certreq.exe but will give you a good idea
of the options you have:
http://support.microsoft.com/kb/931351

Alternatively, if you are an Apache house, you are better off using openssl
it's pretty straightforward to generate a self signed certificate, or even a
signed certificate. Google for it and you will find many examples on how you
can use openssl to do that.

--
---
HTH,
Dobromir

Visit http://www.iamechanics.com




"Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
news:850605BA-0D5E-42D8-BF9D-6F1978DA0499@microsoft.com...
>I cant do that becuase we are apache instead of IIS. Any other suggestions?
>
> Thanks,
>
> Sam
>
> "Brian Komar (MVP)" wrote:
>
>> you have to request an ssl certificate using the certificate services web
>> enrollment pages.
>> Brian
>> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
>> news:7DB4F24B-A641-40E7-8C9A-0244DDC99F0E@microsoft.com...
>> > Thanks Brian, how can I setup SSL for Remote Desktop with a stand alone
>> > computer? A computer in a workgroup?
>> >
>> > Thanks,
>> >
>> > Sam
>> >
>> > "Brian Komar (MVP)" wrote:
>> >
>> >> You can only use the certificate wizard to request certificate from
>> >> domain
>> >> joined enterprise CAs.
>> >> Brian
>> >>
>> >> "Sam Ramsey" <SamRamsey@discussions.microsoft.com> wrote in message
>> >> news:7FD5D566-1E01-44E2-B643-EF50C385007A@microsoft.com...
>> >> > Hi, I am trying to install a SSL certificate for Remote Desktop. I
>> >> > installed
>> >> > the Microsoft's Certificate Services and since the computer is not
>> >> > part
>> >> > of
>> >> > a
>> >> > domain, the only option I had to install the CA as is stand alone.
>> >> > So
>> >> > everything went fine that.
>> >> >
>> >> > However, when I'm in the certificate mmc and I try to request new
>> >> > certificate, I do not have the choice "request certificate". The
>> >> > choice
>> >> > does
>> >> > not exist.
>> >> >
>> >> > I have set this up on my domain and have no problems, however on
>> >> > this
>> >> > stand
>> >> > alone computer, I am unable to request certificate and get the SSL
>> >> > installed
>> >> > for Remote Desktop.
>> >> >
>> >> > Thanks,
>> >> >
>> >> > Sam
>> >> >
>> >>
>> >>
>>
>>
 
Back
Top