Application of Windows Server 2008 REMOTEAPP (iii) certificate

Access to both the Remote Desktop server and the RemoteApp Publisher can use a certificate to encrypt the session for security purposes

When a certificate is used, the client queries the certificate revocation list CRL each time it connects to the Remote Desktop server, in order to avoid an error, to extend the CRL into the certificate before requesting the certificate

1. Extend the CRL into a certificate

In BJDC Server Manager, expand AD Certificate Services management, and open the properties of the certification authority

Switch to the extended card, select CRL distribution Point (CDP) at the extension, and check options by icon

Select the Authority Information Access (AIA) again and tick by icon

Publishing CRLs

Select "New CRL"

In Enterprise PKI location to ensure that 3 URL addresses exist in the diagram