Hey everyone! I've been receiving notifications about certificates having a maximum validity of 47 days coming up soon, so I think it's time for me to streamline my certificate installation process. I primarily use certificates for my RDP servers to avoid those annoying warnings. Can anyone share what tools or methods they're using to automate the process of updating, activating, and installing certificates in RDP roles?
5 Answers
Just a heads up, don't mix up web server certificates with internal ones. For RDP, focus on getting an internal CA up and running. That way, you can securely manage your certificates using templates and auto-enrollment for your RDP sessions.
Are you working with RDS Farms via RDWeb, or are you connecting directly to the server? If it’s the latter, setting up ADCS correctly will automate everything for you.
If you set up an Active Directory Certificate Services (AD CS) certificate authority (CA) and configure auto enrollment through Group Policy Objects (GPO), that should streamline your process.
So that updates it from GlobalSign?
I've been using Win-ACME. It allows you to set up hooks that can activate your RDP certificate automatically—it worked perfectly for me just a couple of weeks ago!
In our company, we rely on Win-ACME. It's seriously the best tool for automating this kind of setup—it's reliable, easy to use, and manages renewals like a pro!
I think that's the gist of it, yeah!