RDS Error: RemoteApp - The digital signature of this RDP File cannot be verified.

The following error was received on a client’s system this morning:

 RemoteApp

The digital signature of this RDP File cannot be verified. The remote connection cannot be started.

In this case the RDSH is using self-issued certificates for both Broker services. They had expired.

1. Server Manager –> Remote Desktop Services –> Collections –> Tasks –> Edit Deployment Properties
2. Click Certificates
3. Click on the first Broker service and then the Create new certificate button
• 
4. Set a password and save to C:\Temp\2015-04-14-SelfIssuedSSL.pfx
5. Click on the second Broker service and Select an Existing Certificate
6. Choose the above newly created certificate

In the case where our client’s domains are .LOCAL or .CORP or some other non-Internet facing TLD we leave those two self-issued.

If we have an Internet facing domain then we use a third party trusted certificate as can be seen in the snip above.

Because we are deploying a lot of Remote Desktop Services solutions we always use an Internet TLD for the internal domain after making sure the client owns that domain and its registered for a decade.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book