Installing SSL certificate Windows Server 2012R2 RDSH servers

Hello,
I'm currently in the final fase of installing an functional Remote Desktop (Windows Server 2012R2) environment. The only problem i have, which i try to complete several days now without any luck, is the installation of our WildCard SSL certificate on de
Remote Desktop Session Host servers (farm).
We have 1 gateway server which is also the connection broker. On this server i have installed (using the Deployment Properties of the Session Collection) the certificate on all available levels. But still, when i try to connect to our Remote Desktop Servers
i get the automatically created certificate from the Remote Desktop Session Host servers. The certificate works for all the other functions (gateway etc.)
The servers are joined to the domain, and the wildcard certificate = *.zon-ict.nl.
Below the screenshot of the deployment settings.
Can someone point me in the right direction for installing the certificate on the RDSH servers?

Hi,
Thank you for posting in Windows Server Forum.
Basic requirements for Remote Desktop certificates:
1. The certificate is installed into computer’s “Personal” certificate store.
2. The certificate has a corresponding private key.
3. The "Enhanced Key Usage" extension has a value of either "Server Authentication" or "Remote Desktop Authentication" (1.3.6.1.4.1.311.54.1.2). Certificates with no "Enhanced Key Usage" extension can be used as well.
Please follow beneath article for details.
Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki

Similar Messages

Error While installing Visual Studio 2005 in windows server 2012R2

Hi Team
One Help
I am using windows server 2012R2.I want to install visual studio 2005.
i downloaded VS 2005 from :
http://www.microsoft.com/en-us/download/details.aspx?id=804
while installin i am getting this error :
"the upgrade patch cannot be installed by the windows installer service because the program to be upgraded or missing or upgrade patch may update a different version of the program.Verify that progam to be upgraded on exiting computer that you have
the correct upgrade patch"
PLease help us.
Thanks,
Bob

Hi Gopi,
Are you trying to add the hosts to your OEM 12c, and then choosing "Deploy Agent"?
Please check this error message about the image file..
The image file C:\oracle\core\12.1.0.2.0\jdk\bin\java.exe is valid, but is for a
machine type other than the current machine.
"Validating OMS_HOST & EM_UPLOAD_PORT failed."
If the agents are deployed earlier from another OEM12c server, please undeploy them and then try.
Thanks,
Rajiv.

Installing MS Exchange on Windows Server 2012R2 Essentials?

Hi Guys,
I am having trouble finding the appropriate answer to my question - is it possible to install MS Exchange 2013 on Windows Server 2012R2 Essentials edition? Needless to say that this server will be a DC as well - I am aware that it is ot recommended to install
Exchange on domain controller but that is not my question here. I just need to know if it can be installed on 2012R2 Essetials edition? Thank you.
Dino

No. I'm not aware of any documentation showing how this can be done.
Too complicated, the sharing of the IIS the needed ARR..... not supported...not recommended. You get the idea.
That ship has sailed.
Unfortunately TechNet subscriptions aren't coming back, sorry folks :-(

Install SSL certificate - OS X Server 10.8.2

Greeting All,
I am using OS X Server 10.8.2 with Server.app 2.2 and self-signed SSL sertificate. And I try use CA form Verisign.
I already success create CSR and get trial SSL certificate form Verisign. But I found I can't install SSL certificate correct and made it use in Profile Manager 2. When I check Profile Manager 2 in Server.app 2.2. I only see self-signed intermediate CA.
I check Apple on line guide and support site of Verisign but not found any latest guide of how to install it in Server.app. Any advice is welcome.
Thanks,
Spin

If you purchased the SSL certificate, you have to convert the certificate to "PEM"
https://www.sslshopper.com/ssl-converter.html

Unable to install SSL Certificate - ADMIN4118: Only one server certificate can be installed at a time

Hi,
We are trying to install SSL certificate (Verisign Class 3) on iPlanet Web Server (version 7). However, at the final step we are getting the error "ADMIN4118: Only one server certificate can be installed at a time"
We are following the below steps,
Under "Server Certificates" tab,
     -> Click on "Install" button.
     -> On "Select Configuration" click on "Next" button.
     -> On "Select Tokens and Passwords", select default token as "internal" and click on "Next" button.
     -> On "Enter Certificate Data", select option as "Certficate File" and give path to the certificate file which is having .p7b extension
     -> On "Certificate Details" we are getting warning as "Duplicate Server Details Found" and it's by default using the existing certificate's nickname.
     -> On "Review" page after clicking "Finish" button, an error is displayed saying "ADMIN4118: Only one certificate server can be installed at a time"
There are multiple sub-domains availble and the new certificate we want to install contains one more sub-domain.
So, say currently the subdomains present are,
1.abc.com
2.abc.com
so on...
and now we are trying to install a SSL certificate having one more subdomain say 10.abc.com.
Please let us know if you have solution to this problem.
Thanks,
Rajesh

Hi Rajesh,
That error is most commonly seen when you are trying to install a certificate chain into the Web Server.
The chain should be installed using the "Certificate Authorities" tab per the following steps:
1) Login to the Admin Console.
2) Click Edit Configuration from Common Tasks > Configuration Tasks.
3) Click the Certificates > Certificate Authorities tab from the Configurations page.
4) Click the Install... tab from the Certificate Authorities (CAs) page.
An Install CA Certificate Wizard opens. The wizard guides you through the settings available for installing a Certificate Chain. Select Certificate Chain when prompted for Certificate Type.
You should then see the CA and intermediate certificate(s) listed in the security database.
If you have access to MOS, more details can be found in the MOS KM Note:
   Oracle iPlanet Web Server - 'ADMIN4118: Only one server certificate can be installed at a time' When Installing Certificate Chain (Doc ID 1925025.1)
regards
Tracey

We're running Windows server 2003 32bit and want to migrate to Windows server 2012R2 64bit, can someone provide a step by step procedure on how to migrate instances on ADAM to AD LDS?

I have no experience in dealing with servers, but my senior has asked me to investigate on how to migrate instances on ADAM (windows server 2003 32bit) to AD LDS (Windows server 2012R2 64 bit) as in place upgrade is not an option as we're running a 32bit
Server and want to migrate to a 64bit Server. can someone please give me a Walkthrough on how to do this.
Thanks in advance.

Hi,
it'd be of great help if you could give me a step by step process of replication.
There is no step-by-step article/guide of replication process, replication between AD LDS instances of the same configuration set is an automatic process.
All we need to make sure is to create a replica of the existing instance, and there is no network/security obstacle preventing the replication.
Please note that we need to install AD LDS from Server manager on Windows Server 2012 and 2012 R2.
More information for you:
Understanding AD LDS Replication and Configuration Sets
http://technet.microsoft.com/en-us/library/cc770465.aspx
Best Regards,
Amy

How to Migrate windows 2008r2 RDS server to Windows server 2012r2 RDS

Hi, I want to migrate our 2008r2 RD server + Cals to windows server 2012r2 server, the user will still connect to 2008r2 server but the server hosting the license will be migrated to a 2012r2 server. Currently I have 2 servers that users can connect
to that are served by the 2008r2 RDS (the server I'm converting is just hosting the license) the server user connect to point to this license server. How do I proceed to migrate, I'm searching for documentation but I can't find much, I found that I can only
convert to 2012r2 from 2012 or better OS, so I installing a temporary 2012 server to do a double migration seem to be the best course of action but I can't find any documentation on how to Migrate the Remote Desktop Services Role Services from 2008r2 to Windows
Server 2012.
Also I just discovered that this server is also hosting license for windows server 2003 terminal service. Will I be able to host these licences on 2012R2 ?
Any pointer would be appreciated.

Hi,
It seems like migration the Remote Desktop Services Role Services from 2008r2 to Windows Server 2012 is not supported.
http://technet.microsoft.com/library/dn479239.aspx
So i think you may install and configure the RDS server on Windows Server 2012 and then migration to Windows Server 2012r2.
Hope this helps.
Regards.
Vivian Wang

Windows Server 2012R2 disks go offline after reboot

Hi all,
I've a strange issue in my brand new Windows Server 2012R2, let's describe the environment:
Hypervisor = VMware ESX 5.5
Guest OS = Windows 2012 R2 Standard Edition
I've configured the guest OS with several disk for a SQL Server installation, each disk are presented as "pure" virtual disk to Windows that means no RDM (pass through disk).
After a reboot I've discovered that SQL Server has failed to come online, on a brief analisys, all the disks except system drive (C:) and a volume dedicated to swap file (D:) have not come online. They are present in disk management, but they are offline.
I've manually brung online those disk, than reboot and all returned to normality. Subsequent reboot have generated no issues.
In the system log I have no error message except that one of SQL that fails to came online due to the lack of disks...

This happened to me too. Except with server 2008 R2 and exchange 2010. My servers replicate offsite using zerto and I was testing failover and noticed the drive D was offline. Brought it online then rebooted and everything was fine.
So I just build a server 2012 R2 Datacenter edition VM on my production servers, gave it a second disk, initialized it, formatted it and assigned it the drive letter D. Rebooted after installing 3 windows updates and it was offline. There is nothing on this
server at all. It's a fresh install.
I'm running ESXi 5.5 build 2302651 with hardware version 8 and VMware tools version 9.4.11 build 2400950.
From my experience when you see this kind of stuff happen in multiple situations it will happen again. My worry is what if one of my hosts decides to die and HA kicks in and the disk is offline when it boots.
Anyone have anything to add to this?
Edit: My DR site where I tested my failover is DAS and my production site is iscsi. So I don't think the storage type matters.
Edit 2: The SCSI controller type is Paravirtual for all my VM's.

Windows Server 2012R2 fails to get update from WSUS with error code 80072ee6

Hi all,
I've deployed WSUS role on a Windows Server 2012R2 machine. WSUS listen on port 8530. Now I'm trying a test server (this machine runs WIndows Server 2012R2 too). I've configured a GPO but when I try to check for updates I get the errore in the subject.
I've checked windowsupdate.log and theese are the settings of the client:
AIR Mode is disabled
2014-02-05 12:59:00:357
776 fe0
AU # Policy Driven Provider: http://MyWSUS.MyDomain.local:8530
2014-02-05 12:59:00:357
776 fe0
AU # Detection frequency: 22
2014-02-05 12:59:00:357
776 fe0
AU # Target group: CSM Servers
2014-02-05 12:59:00:357
776 fe0
AU # Approval type: Pre-install notify (Policy)
2014-02-05 12:59:00:357
776 fe0
AU # Auto-install minor updates: No (User preference)
2014-02-05 12:59:00:357
776 fe0
AU # Will interact with non-admins (Non-admins are elevated (User preference))
I confirm that from the test server I can telnet to my wsus server on TCP port 8530

Hi,
This issue occurs if the URL under the Group Policy setting 'Specify intranet Microsoft update service location' is invalid.
You receive a "80072EE6" error code when you download an update from Windows Server Update Services in Windows 7-based or Windows Server 2008 R2-based
computer
http://support.microsoft.com/kb/2724184
Make sure that the URL is correct and the name can be resolved.
Hope this helps.

Can't create ODBC connection in Windows Server 2012R2

I just finished installing the instant client & odbc connection on Windows Server 2008R2. I then attempted to perform the same installation on a new Windows Server 2012R2 instance and encountered the following issue.
After extracting the contents of the 64bit instant client & odbc files into c:\oracle\instantclient_12_1, adding this to the path statement, and adding a TNS_ADMIN environmental variable, I successfully ran odbc_install.exe from an admin cmd window. I then opened the 64bit ODBC Data Source Administrator, clicked add, selected the Oracle in instantclient_12_1, and clicked finish. As soon as I did so, I received the following error: "The setup routines for the Oracle in instantclient_12_1 ODBC driver could not be loaded due to system error code 126: The specified module could not be found. (c:\oracle\instantclient_12_1\SQORAS32.dll)"
I uninstalled the odbc client (odbc_uninstall.exe) and attempted again with the 32bit version & 32bit odbc configuration screen. I get the exact same result with 32bit as I do with 64bit.
Any help would be appreciated.
EDIT: Nevermind. Apparently I needed the Microsoft Visual C++ 2010 SP1 Redistributable Package for the correct DLLs

Hi,
I am running Netweaver 7 and ERP2005.
J2EE support pack is 9. The sap note that you mentioned is for NW2004 and our system is running on NW2004s.
Now I am trying to reconfigure the sld. In case if you can suggest me another solution, I will be very happy to try that out...
Thanks for your reply
Edited by: Rakesh Bothra on Apr 20, 2011 4:23 AM

Windows Server 2012R2 Failover Cluster error with mounted volumes

Hi all,
I've a problem with mounted volume on a WSFC build on top of Windows Server 2012R2, the situation is:
M: is the volume hosting mounting points
disk-1, disk-2, disk-3 are volume mounted on M:\SomeFolder
Theese volumes are used by a SQL Server Failover Cluster Instance, but my problem is related to WSFC. I've set dependencies so disk-1, disk-2, disk-3 depend upon H:
If I try a failover of the role "SQL Server" I observe that when the disk come online in the other node they fail with this error:
Cluster resource 'disk-1' of type 'Physical Disk' in clustered role 'SQL Server (ISQL2014A)' failed. The error code was '0xaa' ('The requested resource is in use.').
Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it. Check the resource and group state using Failover Cluster
Manager or the Get-ClusterResource Windows PowerShell cmdlet.
If I manually take offline H: and than bring it online and then manually take online all disk (1 to 3) they come online with no error.
I'm going crazy!

I've found the root of the problem: the servers are virtual machine on a VMware ESX 5.5 infrastructure, VMware claims that on 5.5 multipath is supported for raw device mapping disks but disabling multipath (I've set to fixed path) the Windows Server Failover
Cluster stops to get problems.
Now we have opened a support call with VMware.

Visual Studio 2013 on Window Server 2012R2

Help install of visual studio 2013 in Window Server 2012R2 - please help - I do believe there are regedit additions that has
to be made.

Hi alberc,
Please share at least your error info here so that we can troubleshoot it.
Or you can upload your logs. Please use http://aka.ms/vscollect
to gather the installation logs. After using it, you will find vslogs.cab from %temp% folder. Please upload the file to
https://skydrive.live.com/
and share the link here.
And a common troubleshooting steps have been listed here:
https://support.microsoft.com/en-us/kb/2899270?wa=wsignin1.0
Best regards,
Barry
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Windows Server 2012R2 RDS sound and smartcard redirection issues

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with
Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
Our terminals are running correctly after fresh boot, but in 12 to 48 hours after boot we encounter problem with sound and smardcards redirection in RDP. Remote sound stops working and users cannot login with their smardcards.
Relogging users doesnt help, deleting profiles doesnt help, restarting sound service doesnt help, only viable way to solve issue is server restart. There is not any event in event log about this issue.

Hi,
Thank you for posting in Windows Server Forum.
Sound Redirection:
Please check the following GP setting as well.
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Limit audio playback quality: Enabled
Audio Quality: High
On the Client PC, in the .rdp file that you use to connect to the server, make sure you have the following line:
audioqualitymode:i:2
In addition check that the Windows Audio and Windows Audio Endpoint Builder services must be running for audio to work.
Smartcard redirection:
Kindly try to update the patch for Smartcard redirection and check the result.
Smart card redirection in remote sessions fails in a Windows 7 SP1-based RDP 8.1 client
http://support.microsoft.com/kb/2913751
Hope it helps!
Thanks,
Dharmesh

Windows Server 2012R2 - svchost.exe 60-100% load!

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with Windows
Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
There is problem with high cpu load on these servers. Sometimes Svchost.exe starts to cause 60-100% load. Our virtual machines have 10 virtual processor cores. Load is caused by LSM (Local Session Manager) Service from DCOM Launcher group. Svchost
creates many thread as you can see on picture attached. Sometimes this load disappears after 12-24 hours, sometimes it needs restarting whole server.
We still cannot find cause of this problem, although we managed to reproduce this issue one time by logging two admin accounts to server console and force disconnecting one of these accounts by third admin account connecting to server console by RDP
mstsc.exe with -admin parameter.
Our users are very unsatisfied :-(
This is screenshot of Process Explorer - svchost.exe - Threads:

Hi,
Thank you for posting in Windows Server Forum.
Do you have any recent updates, might happens due to automatic updates which also can cause high cpu through svchost.exe. Please check as suggested by “Larry” by turning off Windows update service. In addition go through beneath articles for more information.
1. Automatic Update causes SVCHOST.exe high CPU
2. Getting Started with SVCHOST.EXE Troubleshooting
Hope it helps!
Thanks,
Dharmesh

Windows Server 2012R2 DHCP Load Sharing Mode

Hello,
I am planning to migrate a standalone DHCP Server on Windows 2003 to Windows Server 2012R2. With this migration, I like to use the 2012R2 Load Sharing Mode feature for DHCP. This implementation cover TWO sites.
My initial plan was to have two Windows 2012R2 DHCP Servers (virtual) at each site thus servers at each offers site redundancy as well. So two at Site 1 and two at Site 2 on load sharing mode. If ServerA at Site 1 goes down for some reason Server B
at Site1 will service the DHCP clients in load sharing mode without going to Site 2. I came across a MS document that says:
Number of Servers: DHCP failover is not supported for more than two DHCP Servers. The failover relationship is always comprised of two DHCP servers.
Does this mean I can have only TWO DHCP Servers in a load sharing mode. One at Site 1 and the second one at Site 2??
Thanks in advance
TIA TP

Hi,
The DHCP failover relationship is comprised of DHCP server and its partner. In a relationship there are just 2 DHCP servers.
But this doesn’t mean you can just use 2 DHCP servers in your sites. The DHCP failover setting is based on DHCP scope, for one DHCP scope there could be just one DHCP failover relationship including 2 DHCP servers. If you have more than 1 DHCP scope,
for example, set DHCP failover relationship between DHCP server 1 and DHCP server 2 for scope A. then set DHCP failover relationship between DHCP server 1 and DHCP server 3 for scope B.
The document Step-by-Step: Configure DHCP for Failover(http://technet.microsoft.com/en-us/library/hh831385.aspx) is a introduction about this function and for your reference.
Depends on the DHCP scope’s configuration and the requirements of your network. You may enhance or customize the architecture of implementation.
Best Regards,
Eve Wang

Installing SSL certificate Windows Server 2012R2 RDSH servers

Similar Messages

Maybe you are looking for