Remote Desktop domain/certificate problem

[RottPaws]

We've got SBS2011 Standard installed and we're having difficulty with the remote desktop feature.

I've been tasked with figuring it out. I've either been on google or had my nose in a book for a few days, but haven't been able to find any info that has been helpful.

From within the domain. I can go to remote.ourdomain.com and login to the Remote Web Access. From there, I can click on a computer and connect for a Remote Desktop session.

From outside the domain, I get an error that says the page cannot be found/displayed. I can go to

http://ourdomain.com/remote

and get into Remote Desktop Access, but when I try to connect to a computer, I get an error message saying:

This computer can't connect to the remote computer because the certificate authority that generated the Terminal Services Gateway server's certificate is not valid. Contact your network administrator for assistance.​

It does give me the option of looking at the certificate and it says it's issued to remote.ourdomain.com (not literally "ourdomain", obviously).

Since we're a small business without a real network admin, I'm stuck asking myself for assistance I'm unable to provide.

Can anyone give me a clue about what I need to do? I'd be happy to provide any additional info as needed.

_________
RottPaws

If you don't report a problem, I probably won't fix it.

 

[hairlessupportmonkey]

you need to install a real SSL cert.

you can get a real one for free from StartSSL

then follow this link and you should be set!



ACSS - SME
General Geek

 

[RottPaws]

The self-issued certificate worked fine once it was downloaded to the local machine.

After hours of frustration and research, I finally figured out the actual problem I was having was I needed to ad an A Record to the DNS server for the remote sub-domain. Once that was done and it had time to propogate through the internet, it started working as it should.

_________
RottPaws

If you don't report a problem, I probably won't fix it.

 

[kurio71]

Get a public SSL cert otherwise you'll need to install the self-signed cert on all client devices that aren't on the LAN.

Level 1 Support Technician