Map the TS Gateway Certificate

Applies To: Windows Server 2008

After you obtain and install a certificate for the TS Gateway server, you must map the certificate to the TS Gateway server by using TS Gateway Manager. If you map a TS Gateway server certificate by using any other method, TS Gateway will not function correctly.


This procedure is not required if you created a self-signed certificate for TS Gateway.

Membership in the local Administrators group, or equivalent, on the TS Gateway server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (

To map the TS Gateway certificate

  1. In the console tree, click to select the node that represents your TS Gateway server, which is named for the computer on which the TS Gateway server is running.

  2. In the TS Gateway Manager console tree, right-click the local TS Gateway server, and then click Properties.

  3. On the SSL Certificate tab, click Select an existing certificate for SSL encryption (recommended), and then click Browse Certificates.

  4. In the Install Certificates dialog box, click the certificate that you want to use, and then click Install.

  5. Click OK to close the Properties dialog box for the TS Gateway server.

  6. If this is the first time that you have mapped the TS Gateway certificate, after the certificate mapping is completed, you can verify that the mapping was successful by viewing the TS Gateway Server Status area in TS Gateway Manager. Under Configuration Status and Configuration Tasks, the warning stating that a server certificate is not yet installed or selected and the View or modify certificate properties hyperlink are no longer displayed.

Additional references