TLS on RDP - non domain member

I have a Windows 2003 Enterprise CA and I setup all 2003 and 2008 domain
member servers to use TLS for RDP connections. I followed the directions
found at http://support.microsoft.com/default.aspx/kb/895433

However, I have a few Windows 2003 servers in a DMZ that are not a member of
the domain. How can I request and install a certificate based off of the
computer template on a computer that is not a member of the domain?

I can’t use the MMC because the system is not a member of the domain. Also,
the computer template is not available on the web site of the certificate
authority.

I already installed the root certificate into the trusted root certification
authorities on the DMZ servers.

Thanks

 

Hello FlyDye,

I will crosspost this to:
microsoft.public.windows.server.security

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a Windows 2003 Enterprise CA and I setup all 2003 and 2008
> domain member servers to use TLS for RDP connections. I followed the
> directions found at
> http://support.microsoft.com/default.aspx/kb/895433
>
> However, I have a few Windows 2003 servers in a DMZ that are not a
> member of the domain. How can I request and install a certificate
> based off of the computer template on a computer that is not a member
> of the domain?
>
> I can't use the MMC because the system is not a member of the domain.
> Also, the computer template is not available on the web site of the
> certificate authority.
>
> I already installed the root certificate into the trusted root
> certification authorities on the DMZ servers.
>
> Thanks
>

 

Thank you. Not sure where to post this one.

"FlyDye" wrote:

> I have a Windows 2003 Enterprise CA and I setup all 2003 and 2008 domain
> member servers to use TLS for RDP connections. I followed the directions
> found at http://support.microsoft.com/default.aspx/kb/895433
>
> However, I have a few Windows 2003 servers in a DMZ that are not a member of
> the domain. How can I request and install a certificate based off of the
> computer template on a computer that is not a member of the domain?
>
> I can’t use the MMC because the system is not a member of the domain. Also,
> the computer template is not available on the web site of the certificate
> authority.
>
> I already installed the root certificate into the trusted root certification
> authorities on the DMZ servers.
>
> Thanks