How to remove annoying certificate warning for RDP

Hello Habr, this is a super short and simple guide for beginners on how to connect via RDP using a domain name so that an annoying warning about a certificate signed by the server itself does not come out. We need WinAcme and a domain.

Everyone who has ever used RDP has seen this inscription.

The manual contains ready-made commands for greater convenience. I copied, pasted and it worked.

So, this window can, in principle, be skipped if you issue a certificate signed by a third-party, trusted certification authority. In this case, Let's Encrypt.

1. Add an A record

Just add an A record and enter the server's IP address into it. This completes the work with the domain.

2. Download WinAcme

Download WinAcme from their website. The archive is best unpacked to where you can’t get, executable files and scripts will still be useful to you in the future for automatic certificate renewal. It is best to shake out the archive in C: WinAcme.

3. Open port 80

Authorization of your server is carried out via http, so we need to open port 80. To do this, enter the following command in Powershell:

New-NetFirewallRule -DisplayName 80-TCP-IN -Direction Inbound -Protocol TCP -Enabled True -LocalPort 80

4. Allow script execution

In order for WinAcme to be able to import the new certificate without problems, you need to allow scripts to run. To do this, go to the folder /Scripts/

Before running WinAcme, we need to allow two scripts to run. To do this, double-click to run PSRDSCerts.bat from the scripts folder.

5. Install the certificate

Then copy the line below and enter the name of the domain by which you want to connect to the server and run the command.

C:Winacmewacs.exe --target manual --host VASHDOMAIN.RU --certificatestore My --installation script --installationsiteid 1 --script "ScriptsImportRDListener.ps1" --scriptparameters "{CertThumbprint}"

After that, the certificate of the signing domain will take the place of the old one. You do not need to update anything manually, after 60 days the program will renew the certificate itself.

Ready! You are great and got rid of a pesky bug.

What system errors annoy you?

Source: habr.com