Farm member not using 3rd party certificate

I have a Microsoft server 2008 R2 RDS farm using a broker and NLB farm nodes.
In the farm member node ( not the broker ), I open “Remote Desktop Session Host Configuration” tool I selected “member of farm RD Connection Broker” and in the “general” tab under the “certificate” section I clicked “select” and picked the 3rd party
Certificate.
This is a Farm member. When I use a rdp client to go to farmName.domain.com I get a pop up with a certificate error and it shows the certificate as serverName.domain.com and not the name in the “farm” certificate.
How can I troubleshoot this issue.

Hi,
Iniitally seems the certificate is not from valid trusted authority. So please check the trusted authority. Apart there is mismatch in certificate name with server name.
The name in the Subject line of the server certificate (certificate name, or CN) must match the FQDN, or the DNS name that the client uses to connect to the RD Gateway server, unless you are using wildcard certificates or the SAN attributes of certificates.
If your organization issues certificates from an enterprise certification authority (CA), a certificate template must be configured so that the appropriate name is supplied in the certificate request.
The certificate must be trusted on clients. That is, the public certificate of the CA that signed the RD Gateway server certificate must be located in the Trusted Root Certification Authorities store on the client computer.
In addition, please check beneath article for reference.
Configuring Remote Desktop certificates
http://blogs.msdn.com/b/rds/archive/2010/04/09/configuring-remote-desktop-certificates.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

PKI setup using 3rd party certificates

I want to configure SCCM in our environment using are existing certificate creation infrastructure. I do not want to use Microsoft Certificate services. Instead I'd rather use our OpenSSL solution. However I cannot find good documentation to work with using
3rd party certificates. Everything is related around Microsoft's certificate services.
Has anyone had any luck implementing SCCM in this manor? Documentation available to aid?

So we are planning to setup https across the board and going through the blogs and TechNet article - I see that internal PKI is a requirement and you just cannot do away with 3rd party/external certificate, correct ??
I am working on a scenario where the customer does not want to implement internal PKI but use external certificate either by GoDaady or Thawte or VeriSign where possible at all times but looks like you can't use the external certificate to act as ConfigMgr
Web Certificate or ConfigMgr DP Cert?
given the following scenario
https://social.technet.microsoft.com/Forums/en-US/ac34ebdf-c932-4075-b4a3-ebe572ffab0e/scenario-multi-tenant-configmgr-2012-r2-and-same-ip-address-range-for-multiple-customer?forum=configmanagerdeployment#868600a8-e8eb-471a-b767-761305636041
for clients to communicate to DP's/Secondary Sites configured in HTTPS, we still need internal PKI ?
I guess the answer is yes to all.. but just confirming :)

Cisco IOS CA using 3rd Party Certificate

Hi,
Can I use 3rd Party certificate such as verisign, on Cisco IOS CA ? All i can see on cisco.com is self-signed certificate from router.
Thanks
-santo-

Santo,
That's fair enough. A key information to make sure customers understand that a private PKI infrustructure is (for the purpose of deployment such as GETVPN) as secure as provided by third part party.
Private PKI is not based on self signed certificates - only the root CA might need something like it :-)
That being said, for reliability and flexability I really suggest storing CA (ser, CRL, OCSP, backup of public/private keys) files on storage external to the router.
Key takeway is that a properly managed private PKI solution for deployments like DMVPN/GETVPN others is as secure as external 3rd party services (and often time order of magnitude cheaper).
M.

How to write notes using 3rd party plugins ipad

Hi,
Basically im trying to write the notes in garage bad from imini. But all i can do is record it using audiobus.
Is there anyway to write the notes in garageband using the imini.
Kind regards
Martyn

Try Goodreader in the App Store. It should do the job for you.

WLC5760 - CSR request for 3rd party certificate

I need to generate a CSR request to obtain a 3rd party certificate for my WLC.
i am not sure how i can do that. all document availble are for wlc 4400.
let me know if the same process will apply to wlc5760 as well.

Thanks Matteo,
I managed to get it done, Yes I used OpenSSL to generate CSR.
Here what I have learnt about it, including WebAuth Cert installation on 5760. This may be useful to someone else.
http://mrncciew.com/2014/07/30/5760-webauth-certificates/
HTH
Rasika
**** Pls rate all useful responses ****

3rd party certificate on WiSM controllers

Hi,
On my corporate wireless net, there is an SSID to allow guests to reach the Internet. They receive a voucher with 1-day valid credentials and are asked to open a browser, which is redirected to a login page https://1.1.1.1/login.html.
The controllers in the acnhor group have a 3rd party certificate installed. It is generated for a company URL like: guest.companyname.com
So when the browser hits the login screen, it stops and issues a warning about receiving a valid certificate but for a different URL.
We have an external DNS-record which resolves the company URL to 1.1.1.1.
I see a possible solution, if the URL of the Internal (default) URL can be changed to https://guest.companyname.com/login.html because if this is keyed in manually, I receive the login page right away without warnings. This is obviously what we want the guest to see.
The controllers run 7.0.230.0 software as well as the WLC.
Hope someone has the simple answer to this???

Putting 1.1.1.1 (VIP address) is a test to bypass the certificate. It is pretty simple, if you have done it a hundred times. But to start of from the basic, make sure that the user is being anchored to the guest wlc. You should see an entry of the client on the guest anchor and the client should be in the WEBAUTH_REQD state until they go through the login proccess in which they will be in the RUN state. If you don't , then I can see why the 3rd party certificate is not working. SO you should see the client on the foreign and the anchor wlc. Make sure of this first.
Did you not restart the anchors when you put in the FQDN in the VIP?
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Exchange Server 2010 Edge Transport Subscription Issue while moving Internal CA Certificate to 3rd Party Certificate

My Client have a Exchange 2010 Organization with Single Domain Single Forest.
They were using Internal CA Certificate and a TLS Cert.
As a POC we are doing a POC for Exchange 2010 Hybrid Office 365 Environment.
For this 3rd Party CA is Mandatory and they have bought a Geo Trust Certificate.
Now when they have installed cert on both HUB as well as EDGE servers, he was prompted to do edge subscription again.
HUB and CAS are combined on the server at both Main and DR Site.
When they try to do edge subscription again they are getting the following error.
SYED WASIL UDDIN Infrastructure Consultant/System Engineer Premier Systems (Pvt.) Ltd.

I was finding out the solution and got this.
1-Certificate will import on both EDGE and HUB Servers.
2-Edge Sync will use Self-Sign Certificate (but I an unable to find how do I configure this)
3-some communication between Edge and Hub will be encrypted via 3rd party Certificate.
Could anyone suggest, which services on HUB must based in this 3rd party cert.
All the external communication must be encrypted via 3rd party CA and communication between HUB-EDGE will set on self-sign Cert. How do I do this.
SYED WASIL UDDIN Infrastructure Consultant/System Engineer Premier Systems (Pvt.) Ltd.
Hi,
Please run Get-ExchangeCertificate | fl to check your Exchange certificate settings. Also confirm if the 5E470560626E313646730C177FCA66728E2BAFF7 certificate is your trusted 3rd party cert.
Please use Enable-ExchangeCertificate cmdlet to assign SMTP service to your self-signed certificate in your Edge server.
Regards,
Winnie Liang
TechNet Community Support

Getting chapters from PPro 2.0 into Encore 2.0 while using 3rd party encoder

Placing chapters in Premiere is a HUGE time saver. However, I also like to use 3rd party software to encode my videos to MPEG (Canopus ProCoder2.0). This process loses the Chapter information that the .avi file carries. Is there any way to get the chapter information into Encore while still using ProCoder?

Ok, thanks. I really wish Adobe would allow users to import and export chapter information. That would greatly increase my workflow. The thing that kills me is that in Encore 1.0, the chapters were connected to the timeline, not the video. So I could drop the AVI file into a timeline in Encore to create the chapter points, then delete it and place my MPEG video in its place. But Adobe got rid of this capability in 1.5.

DBMS_CRYPTO MD5 hash value does not match 3rd party MD5 free tool

Hello,
I am using Oracle Version: 11.2.4.
I have a problem where the MD5 value from DBMS_CRYPTO does not match the hash value from 3rd party MD5 free tool (MD5 Checksum Calculator 0.0.5.58 or WinMD5Free v1.20) and also the MD5 hash value calculated by an ingestion tool where I am transferring files to. The MD5 hash value that the ingestion tool calculates is the same as the 3rd party MD5 free tools I have. This occurs only on some of the XML files that I generate using XSQL(xmlserialize, xmlagg, xmlelement, etc.) and DBMS_XSLPROCESSOR on a Linux OS. The XML files are transferred from the Unix OS to my Windows 7 OS via filezilla.
I found a thread on this forum that also had a similar issue so I copy/paste the java functions. They are listed below(both are the same expect for the character set):
create or replace java source named "MD5_UTF_8" as
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.sql.Clob;
import java.sql.Blob;
public class MD5_UTF_8 {
private static final byte [] hexDigit = {
'0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F'
/** Converts a byte array to a hex string
* Returns an empty string if the byte array is null
public static final String toHexString(byte [] bytes) {
if (bytes == null) return new String("");
StringBuffer buf = new StringBuffer(bytes.length * 2);
for (int i = 0; i < bytes.length; i++) {
buf.append((char) hexDigit[((bytes >>> 4) & 0x0F)]);
buf.append((char) hexDigit[(bytes & 0x0F)]);
return buf.toString();
// Convert Hex String to Byte Array
public static final byte[] byteArrayFromHexString(String str) {
byte[] bytes = new byte[str.length() / 2];
for (int i = 0; i < bytes.length; i++)
bytes = (byte) Integer.parseInt(str.substring(2 * i, 2 * i + 2), 16);
return bytes;
public static String getMD5HashFromClob(Clob inhalt) throws Exception{
MessageDigest algorithm;
StringBuffer hexString;
String s = null;
String salida = null;
int i;
byte[] digest;
String tepFordigest = inhalt.getSubString(1L, (int)inhalt.length());
try {
algorithm = MessageDigest.getInstance("MD5_UTF_8");
algorithm.reset();
algorithm.update(tepFordigest.getBytes("UTF-8"));
digest = algorithm.digest();
s = toHexString(digest);
} catch (java.security.NoSuchAlgorithmException nsae) {
s = "No es posible cifrar MD5";
return s;
sho err
alter java source "MD5_UTF_8" compile
sho err
CREATE OR REPLACE FUNCTION get_md5_UTF_8_CLOB(inhalt CLOB) RETURN VARCHAR2 DETERMINISTIC
AS LANGUAGE JAVA
name 'MD5_UTF_8.getMD5HashFromClob(java.sql.Clob) return java.lang.String';
create or replace java source named "MD5" as
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.sql.Clob;
import java.sql.Blob;
public class MD5 {
private static final byte [] hexDigit = {
'0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F'
/** Converts a byte array to a hex string
* Returns an empty string if the byte array is null
public static final String toHexString(byte [] bytes) {
if (bytes == null) return new String("");
StringBuffer buf = new StringBuffer(bytes.length * 2);
for (int i = 0; i < bytes.length; i++) {
buf.append((char) hexDigit[((bytes >>> 4) & 0x0F)]);
buf.append((char) hexDigit[(bytes & 0x0F)]);
return buf.toString();
// Convert Hex String to Byte Array
public static final byte[] byteArrayFromHexString(String str) {
byte[] bytes = new byte[str.length() / 2];
for (int i = 0; i < bytes.length; i++)
bytes = (byte) Integer.parseInt(str.substring(2 * i, 2 * i + 2), 16);
return bytes;
public static String getMD5HashFromClob(Clob inhalt) throws Exception{
MessageDigest algorithm;
StringBuffer hexString;
String s = null;
String salida = null;
int i;
byte[] digest;
String tepFordigest = inhalt.getSubString(1L, (int)inhalt.length());
try {
algorithm = MessageDigest.getInstance("MD5");
algorithm.reset();
algorithm.update(tepFordigest.getBytes());
digest = algorithm.digest();
s = toHexString(digest);
} catch (java.security.NoSuchAlgorithmException nsae) {
s = "No es posible cifrar MD5";
return s;
sho err
alter java source "MD5" compile
sho err
CREATE OR REPLACE FUNCTION get_md5_CLOB(inhalt CLOB) RETURN VARCHAR2 DETERMINISTIC
AS LANGUAGE JAVA
name 'MD5.getMD5HashFromClob(java.sql.Clob) return java.lang.String';
I created the above java functions and added the calls to them in my package to see what hash values they would produce but I am getting "ORA-29532: Java call terminated by uncaught Java exception: java.nio.BufferOverflowException " the XML is about 60mb.
package code sniippets:
declare
l_hash raw(2000);
l_checksum_md5 varchar2(2000);
l_checksum_md5_utf_8 varchar2(2000);
Begin
t_checksum := lower(RAWTOHEX(dbms_crypto.hash(src=>l_clob,typ=>dbms_crypto.hash_md5)));
l_hash := get_md5_CLOB (l_clob);
l_checksum_md5 := lower(rawtohex(l_hash));
l_hash := get_md5_UTF_8_CLOB (l_clob);
l_checksum_md5_UTF_8 := lower(rawtohex(l_hash));Please help,
Thank You in advance
Don
Edited by: 972551 on Nov 21, 2012 12:18 PM
Edited by: sabre150 on Nov 21, 2012 11:06 PM
Moderator action : added [code ] tags to format properly. In future please add them yourself.

>
I have a problem where the MD5 value from DBMS_CRYPTO does not match the hash value from 3rd party MD5 free tool (MD5 Checksum Calculator 0.0.5.58 or WinMD5Free v1.20) and also the MD5 hash value calculated by an ingestion tool where I am transferring files to. The MD5 hash value that the ingestion tool calculates is the same as the 3rd party MD5 free tools I have.
I found a thread on this forum that also had a similar issue so I copy/paste the java functions.
>
And in that thread (Re: MD5 HASH computed from DBMS_CRYPTO does not match .NET MD5 I provided the reason why DBMS_CRYPTO may not match hashes produced by other methodologies.
I have no idea why you copied and posted all of that Java code the other poster and I provided since code has NOTHING to do with the problem you say you are having. Thte other poster's question was how to write Java code that would produce the same result as DBMS_CRYPTO.
You said your problem was understanding why DBMS_CRYPTO 'does not match the hash value from 3rd party MD5 free tool ...'. and I answered that in the other forum.
>
The Crypto package always converts everything to AL32UTF8 before hashing so if the .NET character set is different the hash will likely be different.
See DBMS_CRYPTO in the PL/SQL Packages and Types doc
http://docs.oracle.com/cd/B28359_01/appdev.111/b28419/d_crypto.htm
If you look at the spec header for the DBMS_CRYPTO package it shows this note:
-- Prior to encryption, hashing or keyed hashing, CLOB datatype is
-- converted to AL32UTF8. This allows cryptographic data to be
-- transferred and understood between databases with different
-- character sets, across character set changes and between
-- separate processes (for example, Java programs).
-- If your 3rd party MD5 free tool (MD5 Checksum Calculator 0.0.5.58 or WinMD5Free v1.20) do not use the AL32UTF8 character set then the hashes will likely be different. You can't modify DBMS_CRYPTO so if the hashes need to match you need to use 3rd party tools that either use the correct character set or can be configured to use the correct character set.
The problem in the other thread was how to WRITE Java code that uses the correct character set and I showed that OP how to do that.
So unless you are writing your own Java code all of that code you copied and pasted is useless for your use case.

What is the difference between Outlook features using exchage server and using 3rd party mail server ?

Hi~ I'd like to know what the difference is between Outlook features using exchage server and using 3rd party mail server.
If I use 3rd party mail server with Outlook, Outlook features are the same as Exchange Server ?
I want to use all Outlook features..

The basic features (and many advanced features) are identical in all accounts. With pop3, your mail, calendar, contacts, tasks, notes are stored in a pst and are only on the computer. IMAP accounts only sync email back to the server, not calendar,
contacts, and tasks. Outlook.com EAS accounts (aka Hotmail) syncs calendar and contacts back to the server. Exchange mailboxes stores everything on the server - mail, calendar, contacts, custom views, rules - and if you open the mailbox in outlook on
any other computer, the mailbox is identical. Because everything is on the server, you'll have much better syncing with smartphones and tablets with Exchange mailboxes.
Calendar sharing, open other users folder, and retention policies are Exchange-only. Mail Tips and apps (linked under the reading pane header in Outlook 2013) are Exchange-only.
Diane Poremsky [MVP - Outlook]
Outlook & Exchange Solutions Center
Outlook Tips
Subscribe to Exchange Messaging Outlook weekly newsletter

Does any one used 3rd party components like ICEFaces ?

Hi
Thank you for reading my post.
does any one used 3rd party components like ICEFaces components with Creator Studio?
What are other components pack that we can use in Creator?
thanks

OK, thanks to Peter Hanusiak, and Oracle Consulting consultant in Slovakia, I have resolved my issue and I'm hoping that the same solution may apply for you. See below for the instructions from Peter that helped me out. Note that since our applications are different, the specific libraries and locations that you need to confirm compatibility for may be different.
Hope this helps,
Dave
I had similar problem. And in my case it was caused by different ADF from JDev and SOA Suite and SOA order booking demo.
Because I can't test it now, I'll tell just what I remember.
In SOADEMO is somewhere folder SOADEMO-CLIENT\UserInterface\public_html\WEB-INF\lib
where you can find
adf-faces-impl.jar
jsf-impl.jar
Try to find exactly the same libs in Jdev and copy&paste from Jdev to SOADEMO folder. then find the libs in SOASuite, and copy&paste from Jdev to SOA Suite those libs. Restart SOA Suite. Deploy Soademo-Client. And hopefully it will work.

Is it safe to use 3rd party chargers

is it safe to use 3rd party chargers on the ipod touch 4g or can it mess up the touchscreen or should i get the official apple ones because i have heard some of them blowing up :O and catching fire so do they get hot while they are charging (uk 3 pin) thanks

I sometimes charge mine from my iPad 1 charger or my Griffen charger I purchased from my 3G Nano.
s.salmanhussain10 wrote:
bob please tell me so its safe to charge from ipad original charger? n from any iphone(original/3rdparty) charger ?
thanx

Lock screen event goes to Apple Calendar, NOT my 3rd party one

Holy Carp this is AWFUL.
Finger swiping an event on my Lock screen goes to Apple Calendar, NOT my 3rd party one Week Calendar.
Is there any way to set Week Calendar to open when I swipe events in the lock screen?

If this is happening on multiple phones, and you restored your replacement phone from the backup of your old phone, there is propabably something corrupt in your backup that restored to your new phone. You may have to save as much of your data as you can (import your photos to your computer, back up your contacts and calendar, etc.), then restore your phone as new and start over.

Can I use 3rd party instruments/plug-ins/loops with Garageband '11 running OS X 10.6.8? and how do I install?

Can I use 3rd party instruments/plug-ins/loops with Garageband '11 running OS X 10.6.8? and how do I install?

10.6.8 won't run on a PowerPC Mac.
10.6.8 also won't run the latest Java. Here's what version of Java you can run:
https://discussions.apple.com/docs/DOC-5532

SPA IP Phone - * (Star Key) not working using 3rd party conference service

Hi - I have an SPA 504G with SIP service and use a third party conference service to host conference call. The 3rd party service requires me to log in as the Leader and to do this I have to press the * key. This doesn't work possibly becuse * has been configured as a short action code.
Does anyone know of a way to disable short codes (*) whilst a call is in progress?
Thanks

This doesn't work possibly becuse * has been configured as a short action code.
Then deconfiguration of such action codes and/or relevant supplemental services should solve your problem.
It may help you to know that I have no problem using * against remote IVR with the following configuration (SPA508G with firmware 7.5.4):
Vertical Service Activation Codes
Call Return Code:
Blind Transfer Code:
Call Back Act Code:
*4
Call Back Deact Code:
#4
Cfwd All Act Code:
*21
Cfwd All Deact Code:
#21
Cfwd Busy Act Code:
*67
Cfwd Busy Deact Code:
#67
Cfwd No Ans Act Code:
*61
Cfwd No Ans Deact Code:
#61
CW Act Code:
CW Deact Code:
CW Per Call Act Code:
CW Per Call Deact Code:
Block CID Act Code:
Block CID Deact Code:
Block CID Per Call Act Code:
Block CID Per Call Deact Code:
Block ANC Act Code:
Block ANC Deact Code:
DND Act Code:
*85
DND Deact Code:
#85
Secure All Call Act Code:
Secure No Call Act Code:
Secure One Call Act Code:
Secure One Call Deact Code:
Paging Code:
Call Park Code:
Call Pickup Code:
*1
Call UnPark Code:
Group Call Pickup Code:
*1
Media Loopback Code:
Referral Services Codes:
Feature Dial Services Codes:
*61*`c`|*21*`c`
Supplementary Services
Conference Serv:
yes\r no
Attn Transfer Serv:
yes\r no
Blind Transfer Serv:
yes\r no
DND Serv:
yes\r no
Block ANC Serv:
yes\r no
Call Back Serv:
yes\r no
Block CID Serv:
yes\r no
Secure Call Serv:
yes\r no
Cfwd All Serv:
yes\r no
Cfwd Busy Serv:
yes\r no
Cfwd No Ans Serv:
yes\r no
Paging Serv:
yes\r no
Call Park Serv:
yes\r no
Call Pick Up Serv:
yes\r no
ACD Login Serv:
yes\r no
Group Call Pick Up Serv:
yes\r no
ACD Ext:
1234
Service Annc Serv:
yes\r no

Farm member not using 3rd party certificate

Similar Messages

Maybe you are looking for