Hello Rick,
The latest version of Certify the Web has the option to run a Powershell script that 'renews' the certificate in Remote Desktop Gateway, see screenshot.
The script I use is this
# Replace-RDGatewayCertificate.ps1
Param($result)
# Use the RDS PowerShell module, if available.
# If not, we'll have to set it manually via WMI.
Import-Module RemoteDesktopServices -ErrorAction SilentlyContinue
$RDSPath = "RDS:\GatewayServer\SSLCertificate\Thumbprint"
If (Test-Path $RDSPath) {
Set-Item -Path $RDSPath -Value $result.ManagedItem.CertificateThumbprintHash -ErrorAction Continue
} Else {
# Convert the certificate thumbprint from a String into a Byte[] that WMI can understand.
# The next line is courtesy of: http://www.beefycode.com/post/Convert-FromHex-PowerShell-Filter.aspx
$ByteArray = ($result.ManagedItem.CertificateThumbprintHash -Split "(?<=\G\w{2})(?=\w{2})" | ForEach {[Convert]::ToByte($_,16)})
$wmi = (Get-WmiObject -Class "Win32_TSGatewayServerSettings" -Namespace "root\cimv2\terminalservices")
$wmi.SetCertificate($ByteArray)
}
# Uncomment the next cmdlet to automatically restart the RD Gateway service.
# This is required to apply the new certificate, but it will briefly disconnect all users.
Restart-Service TSGateway -ErrorAction Continue
answered 11/03/2018 19:04