Full solution to Remote Desktop Security (II) (1)

I. Server Remote desktop settings:

By default, the Remote Desktop function does not support SSL encryption authentication, even if we apply for and install a certificate.

Step 1: Start the tscc terminal service configuration window through "START-> Program-> management tools-> terminal service configuration" in the taskbar. 1)

Figure 1 click to view the large image

Step 2: In the tscc terminal service configuration window, click "terminal servers?> Connection. The terminal service is displayed in the right window. Right-click the terminal service and choose Properties ". 2)

Figure 2 click to view the large image

Step 3: Click the edit button next to the certificate Settings area in the General tab to open the certificate settings window. Then, view the certificate and find the certificate we installed in the previous article named 10.91.30.45 ). 3)

Figure 3 click to view the large image

Step 4: After selecting the certificate, you also need to set the security level in the general label. We set the security layer to "SSL" and the encryption level to "high ". After confirmation, complete the remote desktop settings for all servers. 4)

Figure 4

Ii. Install the certificate on the client:

Since certificates are used on the server for SSL encryption authentication, you also need to install these certifications on the client. Remote Desktop Access cannot be performed without installation. There are two ways to obtain the certificate. We will introduce it one by one.

1. Export the certificate from the TS Server:
Step 1: run the task bar and enter mmc to start the MMC snap-in. 5)

Figure 5

Step 2: After opening the MMC snap-in, we need to load the certificate service by using "file-> Add/delete snap-in" in the console menu ". 6)

Figure 6 click to view the large image

Step 3: Find the Certificate Management Unit from "available independent management units" and click "add" to load the management unit. 7)

Figure 7 click to view the large image

Step 4: Select "Computer Account" in the certificate management unit and click "Next ". 8)

Figure 8 click to view the large image