RDS – How to Automate SSL Certificate Configuration

ssl-certificateterminal-serverwindows-server-2008-r2

I am trying to find a command-line tool or script that I can use to select which certificate my Windows 2008 R2 Remote Desktop Session Host (Terminal Server) will use. I have the certificate installation automated, but my google-fu is failing and I am not find a method to select the certificate for use.

The setting I am trying to change via cli/script would be performed through the GUI doing the following

  • Open Remote Desktop Session Host Configuration
  • Double Click on RDP-Tcp for the properties
  • From the general tab click on the 'Select' button. A dialog box automatically shows up showing the certificate that I had already installed, click 'OK'.
  • Click 'OK'.

So please point me to any scripts, command line tools, registry hacks, or group policies that I could use to automate this certificate select step.

Best Answer

PowerShell might do it for you...

I'm not sure how to script this.

On the RDS box, in Administrative Tools, Run As Administrator - Windows PowerShell Modules.

CD RDS:
CD .\RDSConfiguration\Connections\RDP-Tcp\SecuritySettings
Set-Item .\SSLCertificateSHA1Hash

You will need to have the thumbprint of the certificate, I believe.

Related Topic