Home Renewing a RDS/RDG SSL certificate with Godaddy SSL

Renewing a RDS/RDG SSL certificate with Godaddy SSL

This is a quick walkthrough on how to do this. This was written for Windows server 2012R2, but should still be applicable to 2016 and 2019 as well. This is specifically for an RDG (Remote Desktop Gateway) server. Your on-prem RDS server may or may not contain this role, so keep that in mind.

As of this writing the way to get your cert, assuming you’re using Godaddy, is to go here:


  • Click on the cert you want to download
  • Check the expiration date and be sure it’s valid
  • Select IIS as the download type
  • Unzip the files to somewhere the server can reach them
  • On the RDS/RDG server:
    • Open mmc.exe
    • File->Add/Remove snapin->certificates->Computer Account->Local Computer->Finish->OK
    • Expand the Certificates node in the left navigation panel
    • Right click on ‘Personal’->All Tasks->Import
      • mmc import
    • Next->Browse…
    • Find the crt file, Select it, click Open, then click Next-> Select Place all certificates in the following store->Certificate Store: should read Personal, if not then click Browse… and select Personal. Next -> Finish.
      • Cert import wizard
    • IMPORTANT: If you do not see the little key symbol over the cert when you import it- you need to provide a key for that cert.
      • In most cases you need to provide a key
      • Certificates mmc
    • To install a key for the imported cert- Open the cert file->Details tab->copy the ‘Serial Number’ value.
      • Cert serial number
    • Open admin cmd and type: certutil -repairstore my “serialnumber”
    • Where serialnumber is your serial number. So it would look like this: certutil -repairstore my “xxxxxxxxxxxxxxxx” (No Spaces)
    • You’ll see a bunch of output about the cert, with ‘Encryption test passed CertUtil: -repairstore command completed successfully.’ at the bottom if successful.
      • Powershell to fix key
    • Refresh the MMC, and make sure the little key symbol is on the cert file.
    • For good process- check the ‘friendly name’ column in the mmc. If that’s empty, right click on the cert file->Properties. Enter a friendly name. ‘yourFQDN’ should be fine. e.g. rds.yourdomain.com.
    • Now we import the cert to RDG:
    • Open Remote Desktop Gateway Manager
      • On Windows Server 2012 R2: Start->Administrative Tools->Remote Desktop Services->Remote Desktop Gateway Manager
        • Remote Desktop Services Control Panel
    • In the RDGM console tree, right click the local RDG Server, and click Properties
      • RDGM tree properties
    • In the properties, go to the SSL Certificate tab
      • Click “Select an existing certificate from the RD Gateway {Name} Certificates (Local Computer)/Personal store
        • SSL certificates tab
    • Click “Import Certificate”
    • Select the cert you want to use, and click Import.
    • Click OK to close the Properties window

Use an SSL checker to verify that you’re all set- https://ssltools.godaddy.com/views/certChecker

This post is licensed under CC BY 4.0 by the author.

Magento 2 Time Savers

Installing a Godaddy SSL certificate on Exchange 2013

Comments powered by Disqus.