{"id":630,"date":"2017-02-06T06:21:06","date_gmt":"2017-02-06T06:21:06","guid":{"rendered":"http:\/\/www.itcrumbs.com\/?p=630"},"modified":"2019-02-07T04:38:48","modified_gmt":"2019-02-07T04:38:48","slug":"how-to-renew-ssl-cert-for-remote-app","status":"publish","type":"post","link":"https:\/\/www.itcrumbs.com\/?p=630","title":{"rendered":"How to renew SSL cert for Remote App"},"content":{"rendered":"

http:\/\/www.urtech.ca\/2010\/08\/how-to-renew-a-terminal-server-remote-desktop-certificate\/<\/a> <\/p>\n

CREATE A NEW CERTIFICATE REQUEST:<\/strong> <\/p>\n

    \n
  1. Launch IIS Manager and click the SERVER name (not the websites or virtual directories)\n
  2. In the IIS section, click SERVER CERTIFICATES<\/strong> (if you don\u2019t see this, you are likely not at the server level, go click on the server name at the top of the IIS Manager CONNECTIONS tree)\n
  3. Click CREATE CERTIFICATE REQUEST<\/strong> and complete the form. Note that the only things that really counts is the certificate name (like tsg.commodore.ca) and company information.\n
  4. Click NEXT<\/strong> and on the CRYPTOGRAPHIC screen, leave the default MICROSOFT RSA\u2026 provider option but you mush change the BIT LENGTH<\/strong> to 2048.\n
  5. Specify a path for the CSR.  I like C:\\ but it realy make no difference.<\/li>\n<\/ol>\n

    Skip this part for 2012r2, just to MAP A CERT <\/strong> <\/p>\n

      \n
    1. Open the Certificates snap-in console. If you have not already added the Certificates snap-in console, you can do so by doing the following:\n
    2. Click Start<\/strong>, click Run<\/strong>, type mmc<\/strong>, and then click OK<\/strong>.\n
    3. On the File<\/strong> menu, click Add\/Remove Snap-in<\/strong>.\n
    4. In the Add or Remove Snap-ins<\/strong> dialog box, in the Available snap-ins<\/strong> list, click Certificates<\/strong>, and then click Add<\/strong>.\n
    5. In the Certificates snap-in<\/strong> dialog box, click Computer account<\/strong>, and then click Next<\/strong>.\n
    6. In the Select Computer<\/strong> dialog box, click Local computer: (the computer this console is running on)<\/strong>, and then click Finish<\/strong>.\n
    7. In the Add or Remove snap-ins<\/strong> dialog box, click OK<\/strong>.\n
    8. In the Certificates snap-in console, in the console tree, expand Certificates (Local Computer)<\/strong>, and then click Personal<\/strong>.\n
    9. Right-click the Personal <\/strong>folder, point to All Tasks<\/strong>, and then click Import<\/strong>.\n
    10. On the Welcome to the Certificate Import Wizard<\/strong> page, click Next<\/strong>.\n
    11. On the File to Import<\/strong> page, in the File name<\/strong> box, specify the name of the certificate that you want to import, and then click Next<\/strong>.\n
    12. On the Password<\/strong> page, do the following:\n
    13. If you specified a password for the private key associated with the certificate earlier, type the password.\n
    14. If you want to mark the private key for the certificate as exportable, ensure that Mark this key as exportable<\/strong> is selected.\n
    15. If you want to include all extended properties for the certificate, ensure that Include all extended properties<\/strong> is selected.\n
    16. Click Next<\/strong>.\n
    17. On the Certificate Store<\/strong> page, accept the default option, and then click Next<\/strong>.\n
    18. On the Completing the Certificate Import Wizard<\/strong> page, confirm that the correct certificate has been selected.\n
    19. Click Finish<\/strong>.\n
    20. After the certificate import has successfully completed, a message appears confirming that the import was successful. Click OK<\/strong>.\n
    21. With Certificates<\/strong> selected in the console tree, in the details pane, verify that the correct certificate appears in the list of certificates on the TS Gateway server. The certificate must be under the Personal <\/strong>store of the local computer.<\/li>\n<\/ol>\n

      MAP A CERTIFICATE TO THE LOCAL TS \/ RD GATEWAY SERVER: <\/strong> <\/p>\n

        \n
      1. You must use TS Gateway Manager to map the TS Gateway server certificate. If you map a TS Gateway server certificate by using any other method, TS Gateway will not function correctly<\/strong><\/em>.\n
      2. Open TS Gateway Manager. To open TS Gateway Manager, click Start<\/strong>, point to Administrative Tools<\/strong>, point to Terminal Services<\/strong>, and then click TS Gateway Manager<\/strong>.\n
      3. In the TS Gateway Manager console tree, right-click the local TS Gateway server, and then click Properties<\/strong>.\n
      4. On the SSL Certificate<\/strong> tab, click Select an existing certificate for SSL encryption (recommended)<\/strong>, and then click Browse Certificates<\/strong>.\n
      5. In the Install Certificate<\/strong> dialog box, click the certificate that you want to use, and then click Install<\/strong>.\n
      6. Click OK <\/strong>to close the Properties<\/strong> dialog box for the TS Gateway server.\n
      7. If this is the first time that you have mapped the TS Gateway certificate, after the certificate mapping is completed, you can verify that the mapping was successful by viewing the TS Gateway Server Status<\/strong> area in TS Gateway Manager. Under Configuration Status and Configuration Tasks<\/strong>, the warning stating that a server certificate is not yet installed or selected and the View or modify certificate properties<\/strong> hyperlink are no longer displayed<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

        http:\/\/www.urtech.ca\/2010\/08\/how-to-renew-a-terminal-server-remote-desktop-certificate\/ CREATE A NEW CERTIFICATE REQUEST: Launch IIS Manager and click the SERVER name (not the websites or virtual directories) In the IIS section, click SERVER CERTIFICATES (if you don\u2019t see this, you are likely not at the server level, go click on the server name at the top of the IIS Manager CONNECTIONS tree) […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-630","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/posts\/630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=630"}],"version-history":[{"count":1,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/posts\/630\/revisions"}],"predecessor-version":[{"id":631,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=\/wp\/v2\/posts\/630\/revisions\/631"}],"wp:attachment":[{"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itcrumbs.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}