Install a Certificate on the TS Gateway Server
Applies To: Windows Server 2008
After you obtain a certificate, use this procedure to install the certificate in the correct location on the TS Gateway server, if the certificate is not already installed. After you complete this procedure, you must Map the TS Gateway Certificate.
Note
This procedure is not required if you created a self-signed certificate for TS Gateway by either selecting the Create a self-signed certificate for SSL encryption option when using the Add Remove Roles Wizard to install TS Gateway, or by selecting the Create a self-signed certificate for SSL encryption option as described in Create a Self-Signed Certificate for the TS Gateway Server after installing TS Gateway. In either case, a certificate is automatically created, installed in the correct location on the TS Gateway server, and mapped to the TS Gateway server.
Membership in the local Administrators group, or equivalent, on the TS Gateway server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).
To install a certificate on the TS Gateway server
Open the Certificates snap-in console. If you have not already added the Certificates snap-in console, you can do so by doing the following:
Click Start, click Run, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
In the Add or Remove Snap-ins dialog box, in the Available snap-ins list, click Certificates, and then click Add.
In the Certificates snap-in dialog box, click Computer account, and then click Next.
In the Select Computer dialog box, click Local computer: (the computer this console is running on), and then click Finish.
In the Add or Remove Snap-ins dialog box, click OK.
In the Certificates snap-in console, in the console tree, expand Certificates (Local Computer), and then click Personal.
Right-click the Personal folder, point to All Tasks, and then click Import.
On the Welcome to the Certificate Import Wizard page, click Next.
On the File to Import page, in the File name box, specify the name of the certificate that you want to import, and then click Next.
If the Password page appears, if you specified a password for the private key associated with the certificate earlier, type the password, and then click Next.
On the Certificate Store page, accept the default option, and then click Next.
On the Completing the Certificate Import Wizard page, confirm that the correct certificate has been selected.
Click Finish.
After the certificate import has successfully completed, a message appears confirming that the import was successful. Click OK.
With Certificates selected in the console tree, in the details pane, verify that the correct certificate appears in the list of certificates on the TS Gateway server. The certificate must be under the Personal store of the local computer.