RDS SSL Certificate Issue

i purchased ssl certificate through 3rd party provider use on our windows server 2008 r2 server. computers outside of our company, appears work fine. when try , connect server internally, following error:

"a revocation check not performed certificate".

"you may not proceed due severity of certificate error".

i checked certificate , has valid crl distribution point, able connect via web browser on windows 7 workstation (the cdp, not rds server). ca in microsoft's list of trusted providers.

does have thoughts issue might be?

thanks!

don

do have enterprise trust group policy settings domain? may  worth checking under "computer configuration\windows settings\security settings\public key policies\certificate path validation settings" group policy settings.

as temporary workaround can either:

create dword value : hkey_local_machine\system\currentcontrolset\control\lsa\credssp\usecachedcrlonlyandignorerevocationunknownerrors
, set 1. (for credssp single sign on)

and/or create either of following dword values , set them 0 (for pure tls).

hkey_local_machine\software\microsoft\terminal server client\certchainrevocationcheck
hkey_current_user\software\microsoft\terminal server client\certchainrevocationcheck

 

Windows Server  >  Remote Desktop Services (Terminal Services)