RDS VDI Certificate Mismatch RRS feed

  • Question

  • Hi,

    I have a 2012 R2 RDS farm deployed and users are able to log onto the personal desktops successfully.  However, when the user launches the VDI from RDWEB, they receive a certificate mismatch.  The certificate being presented is self signed from the VDI.

    Is this normal behaviour for the VDI connection? Or am I missing something here?

    Wednesday, March 4, 2015 10:04 PM


  • Hi,

    When running App\VDI from RD web we have to use the trusted certificate for proper connection. If you are receiving certificate mismatch error then there are certain reason to occur. When publishing RDS externally, you will see a certificate mismatch as the internal server FQDN’s/IP addresses will show externally during the connection process to RemoteApps or RemoteDesktops.

    There are certain solution to resolve this issue.
    • Can create a new DNS zone, .COM to allow split-brain DNS (so that internal clients can resolve external names internally)
    • Create a relevant DNS entry to point to the RDS environment’s internal IP address
    • Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
    • Use the following script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed

    You can also refer beneath article for information.
    Configuring RDS 2012 Certificates and SSO

    Hope it helps!


    Dharmesh Solanki

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, March 5, 2015 9:44 AM