question

DenisMichael-6202 avatar image
0 Votes"
DenisMichael-6202 asked ·

How do I configure RDGateway in Server 2016 for external connection?

Could someone please show me how do I configure a Terminal Server for external connections? RD Gateway and Client configuration needed.

Windows server 2016 with 10 User CAL's

Thanks

windows-remote-desktop-serviceswindows-server-2016
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Have you checked if the answer helps?

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

0 Votes 0 ·
ElevenYu-MSFT avatar image
0 Votes"
ElevenYu-MSFT answered ·

Hi,

In order to allow external connections through RD Gateway, the RD Gateway server must have a certificate installed that the end-user's device recognizes.

You can use the SSL certificate issued by your Internal CA (certificate authority) or purchase a public trusted certificate from public CA. For internal SSL certificate, you will need to import it to both RD Gateway server and all end users' devices, while, for public trusted certificate, only RD Gateway server needs to import it.

Please follow below guidance to create SSL certificate issued by internal CA. If you use certificate from public CA, please ignore and skip this part.

  1. Install the Certification Authority: https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority

  2. Using certificates in Remote Desktop Services: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn781533(v=ws.11)
    PS: Since the RD Gatway sever will be used for external connections, the external FQDN needs to be added to the certficate name.

  3. Make sure the certificate is installed in the local computer’s “Personal” certificate store on the RD gateway server.

Once the SSL certificate is created, you can do following steps to configure the RD Gateway.

If you have RDS Deployment with RDCB role, you can install the RD Gateway role and configure it on the RDCB server.

  1. Install RD Gateway role by clicking on green icon marked on the picture below
    66802-image.png

  2. After the installation completes, go to Edit Deployment Properties > Certificates > RD Gateway > Select existing certificates, and then browse to the location where you saved the certificate you created previously. Look for the file with the .pfx extension. Once done it should show Trusted.
    66782-image.png
    66794-image.png

  3. You will also need to import the SSL certifcate to the end users' devices. [mmc>certificates (local computer)> Trusted Root Certification Authorities certificates]. If you use public certificate, you can skip this step.

If you only have Terminal Server without RDCB, then you can directly install and configure the RD Gateway server.

  1. Install the RD Gateway role by Server Manager

  2. Import Certificate: open Server Manager and click on Tools –> Remote Desktop Services –> RD Gateway Manager, right-Click on your server and select properties, go to SSL and click Import Certificate, select the created certificate and import it.
    66774-image.png
    66814-image.png
    66841-image.png

  3. Import the SSL certifcate to the end users' devices. If you use public certificate, you can skip this step.

After all the configurations are completed, the users will be able to remote connect to the Terminal Server externally through the RD Gateway server.

On the client, open mstsc > navigate to Advanced tab > click Settings to configure Gateway > Input the external FQDN of the RD Gateway server
66724-image.png
66851-image.png

You can also set CAPs (Connection Authorization Policies) and RAPs (Reosurce Authorization Policies) on the RD Gateway server to specify the users who can connect to this RD Gateway server as well as specify the network resources that users can connect to.

Below blog described the 2016 RDS Deployment step by step, you can read it to learn more details, especially for RD Gateway.
https://nedimmehic.org/2017/01/21/deploying-remote-desktop-services-2016-step-by-step/
RD Gateway: https://nedimmehic.org/2018/03/26/remote-desktop-services-2016-gateway/

Hope the information can help you.

Thanks,
Eleven


If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.



image.png (64.5 KiB)
image.png (131.8 KiB)
image.png (141.8 KiB)
image.png (183.6 KiB)
image.png (64.4 KiB)
image.png (201.3 KiB)
image.png (36.0 KiB)
image.png (30.5 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DenisMichael-6202 avatar image
0 Votes"
DenisMichael-6202 answered ·

I did't had time to implement it, sorry. I'll get back to you in this weekend. Sorry again

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.