I need a simple SSL certificate only for TS and our few RDP 5.2 clients.
Nothing to do with WWW or browsers. Can someone point me in the right
direction how to buy one of these? Hoping to keep it easy on remote
clients, hence the 3rd party CA.

Would the $19 offering from GoDaddy work? or the GeoTrust QuickSSL $189.
I'm a little confused by these since they all see targeted for browsers...

Re: How to buy a SSL certificate? by S

S
Tue Nov 21 03:43:19 CST 2006

Yes GoDaddy certificate should do - from what I see, the certificate is
exactly the same as Web server SSL certificate, including the installation
procedure.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"John" <John@discussions.microsoft.com> wrote in message
news:14EE7C1C-0579-476E-88E5-382E303C4AE3@microsoft.com...
>
> I need a simple SSL certificate only for TS and our few RDP 5.2 clients.
> Nothing to do with WWW or browsers. Can someone point me in the right
> direction how to buy one of these? Hoping to keep it easy on remote
> clients, hence the 3rd party CA.
>
> Would the $19 offering from GoDaddy work? or the GeoTrust QuickSSL $189.
> I'm a little confused by these since they all see targeted for browsers...
>
>
>
>



Re: How to buy a SSL certificate? by John

John
Tue Nov 21 14:02:02 CST 2006


I bought one from GoDaddy.
I'm fairly sure I set everthing up properly, CSR via IIS 6.0, added the Cert
to "Personal" under the TS Computer Account MMC.

But it still does not appear on List, please see this print screen:
http://www.reamsoftware.com/TSCertificateScreen.jpg

I read under the TS MS Docs that I need a SSL-compatiable X.509 certificate?
Maybe the GoDaddy certs are not this flavor. I'm at a loss...






"S. Pidgorny <MVP>" wrote:

> Yes GoDaddy certificate should do - from what I see, the certificate is
> exactly the same as Web server SSL certificate, including the installation
> procedure.
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> "John" <John@discussions.microsoft.com> wrote in message
> news:14EE7C1C-0579-476E-88E5-382E303C4AE3@microsoft.com...
> >
> > I need a simple SSL certificate only for TS and our few RDP 5.2 clients.
> > Nothing to do with WWW or browsers. Can someone point me in the right
> > direction how to buy one of these? Hoping to keep it easy on remote
> > clients, hence the 3rd party CA.
> >
> > Would the $19 offering from GoDaddy work? or the GeoTrust QuickSSL $189.
> > I'm a little confused by these since they all see targeted for browsers...
> >
> >
> >
> >
>
>
>

Re: How to buy a SSL certificate? by S

S
Wed Nov 22 01:30:55 CST 2006

Last time I had similar issue with IAS - resolved by using certain CSP
(namely, Microsoft RSA Schannel) during enrollment. Other issue can be wrong
store or, maybe, name should be the FQDN of the server?

But first make sure you can actually use the cert for SSL.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"John" <John@discussions.microsoft.com> wrote in message
news:8C325A06-986D-4ACD-BAB9-DBFF6CA8496F@microsoft.com...
>
> I bought one from GoDaddy.
> I'm fairly sure I set everthing up properly, CSR via IIS 6.0, added the
> Cert
> to "Personal" under the TS Computer Account MMC.
>
> But it still does not appear on List, please see this print screen:
> http://www.reamsoftware.com/TSCertificateScreen.jpg
>
> I read under the TS MS Docs that I need a SSL-compatiable X.509
> certificate?
> Maybe the GoDaddy certs are not this flavor. I'm at a loss...
>
>
>
>
>
>
> "S. Pidgorny <MVP>" wrote:
>
>> Yes GoDaddy certificate should do - from what I see, the certificate is
>> exactly the same as Web server SSL certificate, including the
>> installation
>> procedure.
>>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> "John" <John@discussions.microsoft.com> wrote in message
>> news:14EE7C1C-0579-476E-88E5-382E303C4AE3@microsoft.com...
>> >
>> > I need a simple SSL certificate only for TS and our few RDP 5.2
>> > clients.
>> > Nothing to do with WWW or browsers. Can someone point me in the right
>> > direction how to buy one of these? Hoping to keep it easy on remote
>> > clients, hence the 3rd party CA.
>> >
>> > Would the $19 offering from GoDaddy work? or the GeoTrust QuickSSL
>> > $189.
>> > I'm a little confused by these since they all see targeted for
>> > browsers...
>> >
>> >
>> >
>> >
>>
>>
>>



RE: How to buy a SSL certificate? by John

John
Wed Nov 22 19:27:01 CST 2006



SOLUTION for: How to Install Win2K3 Terminal Server SSL Certificate

Short Answer to reply/close to various posts I made:

- Do not Install Windows Server 2003 Certificate Services.
- Produce a CSR (Certificate Signing Request) on any available IIS6 box, any
website. Yes CSP, select MS RSA
- In CSR be sure to specify your FQDN intented for use by remote RDC
Users, same as RDC â??Serverâ?? text box.
- My FQDN is a Registered Whois Domain with resolves to IP like any other
Domain.
- Buy a SSL Certificate from any CA. Apply your CSR at CA. Get CRT files,
two in my case, Web Cert & Intermediate Certificate.
- Apply CRTs to IIS6 Box, ICert to MMC and WCert to IIS6.
- Export Certificate from IIS6 Website as .PFX file, remove CRTs from IIS6
Box.
- Apply both CRTs to TS Box via MMC.
- TS Configuration will should now properly see your SSL Certificate.