Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP
Sawubona Habr, lesi umhlahlandlela omfushane kakhulu futhi olula wabaqalayo wokuthi ungaxhuma kanjani nge-RDP usebenzisa igama lesizinda ngaphandle kokuthola isexwayiso esicasulayo mayelana nesitifiketi esisayinwe iseva ngokwayo. Sizodinga i-WinAcme kanye nesizinda.

Wonke umuntu oke wasebenzisa i-RDP uwubonile lo mbhalo.

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP
Imanuwali iqukethe imiyalo esenziwe ngomumo ukuze kube lula. Ngakopisha, nganamathisela futhi kwasebenza.

Ngakho-ke, leli windi, empeleni, lingeqiwa uma ukhipha isitifiketi esisayinwe ngumuntu wesithathu, isiphathimandla sokunikeza izitifiketi esithenjwayo. Kulokhu, Masibhale Ngemfihlo.

1. Engeza irekhodi elingu-A

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Simane sengeze irekhodi bese sifaka ikheli le-IP leseva kulo. Lokhu kuqeda umsebenzi ngesizinda.

2. Landa i-WinAcme

Landa i-WinAcme kuwebhusayithi yabo. Kungcono ukukhipha ingobo yomlando endaweni ethile ongeke ukwazi ukuya kuyo; amafayela asebenzisekayo nemibhalo kuzoba usizo kuwe esikhathini esizayo ukuze ubuyekeze isitifiketi ngokuzenzakalelayo. Kungcono ukuthulula ingobo yomlando ku-C:WinAcme.

3. Vula imbobo 80

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Iseva yakho igunyazwe nge-http, ngakho-ke sidinga ukuvula i-port 80. Ukuze wenze lokhu, faka umyalo ku-Powershell:

New-NetFirewallRule -DisplayName 80-TCP-IN -Direction Inbound -Protocol TCP -Enabled True -LocalPort 80

4. Vumela ukusebenza kombhalo

Ukuze i-WinAcme ikwazi ukungenisa isitifiketi esisha ngaphandle kwezinkinga, udinga ukunika amandla imibhalo. Ukuze wenze lokhu, iya ku-/Izikripthi/ ifolda

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Ngaphambi kokusebenzisa i-WinAcme, sidinga ukuvumela imibhalo emibili ukuthi isebenze. Ukwenza lokhu, chofoza kabili ukuze uvule i-PSRDSCerts.bat kufolda enemibhalo.

5. Faka isitifiketi

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Okulandelayo, kopisha umugqa ongezansi bese ufaka igama lesizinda ofuna ukuxhuma ngalo kuseva bese usebenzisa umyalo.

C:Winacmewacs.exe --target manual --host VASHDOMAIN.RU --certificatestore My --installation script --installationsiteid 1 --script "ScriptsImportRDListener.ps1" --scriptparameters "{CertThumbprint}"

Ngemva kwalokhu, isitifiketi sokusayina isizinda sizongena esikhundleni esidala. Asikho isidingo sokubuyekeza noma yini ngesandla; ngemva kwezinsuku ezingu-60, uhlelo luzovuselela isitifiketi ngokwalo.

Ilungile! Umuhle futhi wasusa isiphazamisi esicasulayo.

Imaphi amaphutha esistimu akucasulayo?

Usisusa kanjani isexwayiso sesitifiketi esicasulayo se-RDP

Source: www.habr.com

Engeza amazwana