Hello

We've built an RDS farm using RD Web and RD Gateway. We've applied a public wildcard certificate to the external facing components RD Gateway and RD Web.

From my understanding to allow SSO to function correctly between RD Web and the broker we need to digitally sign RemoteApp programs with an "Enhanced Key" certificate. My current internal CA is running on 2008 standard, which from what I can tell cant use custom templates and therefore cant be used to generate the above certificate.

Could I simply build another CA on 2008 Enterprise, have its root certificate trusted by our workstation fleet and generate the required certificate? Would running two CA's cause any issue?

Thanks
Matthew

Hello,

for RDS specific questions better ask in http://social.technet.microsoft.com/Forums/windowsserver/en-US/home#forum=winserverTS&filter=alltypes&sort=lastpostdesc&content=Search

and as you have problems with CA and certificates the security forum is the better one to ask http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity