Return
-
Title
What type of certificate is required to be able to secure RDP sessions on the fly? -
Description
What type of certificate is required to complete RDP sessions with a valid certificate generated on-the-fly. The client does not have an internal CA, and would be required to get a certificate from a public CA. A self-signed certificate would not be ideal, since this would require end-users to "ignore" certificate warnings and errors during RDP sessions. -
Resolution
This should be a Certificate Authority (CA) certificate that issues the server SSL certificate presented when a user connects a privileged session via RDP. Each time that an RDP connection is established through Safeguard, an SSL certificate is generated by this CA on-the-fly; therefore, this CA certificate should already be trusted as part of the customer's enterprise PKI. A suggestion would be to use an Intermediate certificate in the same chain that is already trusted by your user's workstations. You must also have the certificate's private key.