Configure server for RDP through winrm/powershell

[norseman]

Hello,

I'm looking to pick some of your brains.

We are looking to update multiple servers which will be requiring a new certificate to replace an existing one in the not too distant future.

 

Is there a way to use winrm / Powershell to perform the installation of the certificate?

We will be using Ansible to perform the install.

 

Right now I am using a Windows Server 2008R2 server via the "RDP Session Host Configuration" application to do it manually and it can be a little slow of a method.

 

Thanks,
norseman

[+BudMan MVC]

Your subject is a bit confusing.  Sounds like your wanting config remote desktop using powershell or winrm.

 

What specific certificate(s) are you needing to replace?  Some cert being used by IIS or some other httpd running on it?

[norseman]

  On 12/10/2016 at 16:31, BudMan said:

Your subject is a bit confusing.  Sounds like your wanting config remote desktop using powershell or winrm.

 

What specific certificate(s) are you needing to replace?  Some cert being used by IIS or some other httpd running on it?

Expand  

Sorry, I would like to update my subject line, however I don't seen any option to edit it, BudMan.

It's an RDP license. We have TLS 1.0 running and are using a wildcard certificate.
 

There are some IIS servers running on other servers, however I would like to address the RDP one solely in this case.

[+BudMan MVC]

So your talking these

https://technet.microsoft.com/en-us/library/cc725890(v=ws.11).aspx

[norseman]

  On 12/10/2016 at 16:37, BudMan said:

So your talking these

https://technet.microsoft.com/en-us/library/cc725890(v=ws.11).aspx

Expand  

Not in this case.

We do have a 5000 cal license server which manages the cal/seat licenses.

The thing is we have around 40 windows servers which are not on the domain and we have configured RDP to use a wildcard cert, so the rds sessions are fully encrypted, not using self-signed cert.
 

This page best describes how I have done it previously.

https://technet.microsoft.com/en-us/library/cc770833(v=ws.11).aspx

 

Windows Windows Server 2012R2 and later, they have removed RDS Session Host Manager tool.

 

I'm wondering if anyone has experience installing the certificate for RDP in 2012 through Powershell. This way we can script it in the future and deploy through Ansible through WinRM.