Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm experiencing a certificate issue while connecting two Windows 7 machines together via Remote Desktop. I have installed the certificate, but I'm getting a message that says the cert is not trusted. What can I do about this?

share|improve this question

migrated from serverfault.com Aug 25 '11 at 23:41

This question came from our site for professional system and network administrators.

1  
Where did you get the certificate, what did you use for the CN value of the certificate? Is the CA that signed the certificate trusted by windows? Why do you need this? –  Zoredache Aug 26 '11 at 0:09
    
@Zoredache Windows 7 generates one automatically with some random stuff in it if a DC wasn't available to issue you one. –  vcsjones Aug 26 '11 at 0:27
    
@vcsjones, I know about the automatically generated certificates, but he mentioned he installed one. I was just wondering if he had purchased a certificate from a CA like godaddy.. It is very easy to do, though I can't imagine why someone would pay for one for RDP. –  Zoredache Aug 26 '11 at 3:40

4 Answers 4

To be honest, if this is a low security environment and you are sure you know the target machine, just click ok/allow it.

If however it is a high security environment and you want certificates to work, make sure that you have imported the certificate in to the correct zone. Try importing again and allow the system to choose the location to import to.

share|improve this answer
2  
Better yet, if it's a high security environment get some proper certificate architecture or pay for a certificate. Good luck revoking a self-signed cert you've installed onto all of your clients' trusted root certificate stores... –  ta.speot.is Aug 27 '11 at 12:23

I'm assuming you are using a self signed certificate and you are not part of a domain. If you are part of a domain, and your domain hosts a CA, then the self signed certificate won't do.

If you aren't in a domain, then your server's certificate has to be imported into the client's Trusted Root Certificate Authority.

enter image description here

share|improve this answer

Make sure that both computers have passwords, that remote assistance is on and that both machines are in the same local area network. I have tried this before and it works properly.

share|improve this answer

Not really an issue so much as ssl doing what it's supposed to do.

All it means is your computer does not recognise the entity which signed the certificate the remote computer is presenting to identify itself with. By default, windows trusts signing authorities like GoDaddy and VeriSign so when you visit websites with certificates signed by these authorities, windows accepts that the remote computer is who it claims to be.

To "fix" the message, you can either tell your computer to trust the signing entity by adding the server certificate to the trusted root CA store on the client as described by @surfasb, or get (buy) and import a new signed server certificate from an already trusted CA.

If you don't get a root CA signed cert, you will to import the current cert on every new client you connect from. If this is for business use, just get a signed certificate for the server and save yourself the hassle.

share|improve this answer
    
did not realise this was a 2 year old question! :O –  Chris Nov 18 '13 at 12:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.