Certificado

Recientemente surgio una actualizacion en CHROME, la cual hacia que no se pudiera conectar a nuestros servidores de Terminal Services, para solucionar esta situación se requirio generar el certificado a traves de PowerShell utilizando la siguiente linea de comandos:

 

New-SelfSignedCertificate -FriendlyName citrix-noreste04 -DnsName citrix-noreste.batta.net -CertStoreLocation Cert:\LocalMachine\My -KeyUsage DigitalSignature, keyEncipherment

 

Cabe hacer mención que se debe ejecutar el PowerShell como administrador y que el contenedor es el «Personal» de ahi que tenemos que usar la utileria MMC para exportar el certificado, tambien se tiene que personalizar la linea de comandos con el nombre del server en cuestion.

 

Mensajes de error que salen por el lado del cliente (CHROME)

Citrix/ICA

New-SelfSignedCertificate -FriendlyName citrix-centro-06 -DnsName citrix-centro.batta.net -CertStoreLocation Cert:\LocalMachine\My -KeyUsage DigitalSignature, keyEncipherment


New-SelfSignedCertificate -DnsName "citrix-sur.batta.net", "Citrix-Sur", '172.16.27.101' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-sur.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-sur"

New-SelfSignedCertificate -DnsName "citrix-pacificon.batta.net", "Citrix-pacificon", '172.16.27.102' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-pacificon.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-pacificon"

New-SelfSignedCertificate -DnsName "citrix-spacifico.batta.net", "Citrix-spacifico", '172.16.27.103' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-spacifico.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-spacifico"

New-SelfSignedCertificate -DnsName "Citrix-Norte", "citrix-norte.batta.net",'172.16.27.104' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "NorteCitrix" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-Norte,CN=Equipos del dominio,CN=Users,DC=batta,DC=net"

New-SelfSignedCertificate -DnsName "citrix-noreste.batta.net", "Citrix-noreste", '172.16.27.105' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-noreste.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-noreste"

New-SelfSignedCertificate -DnsName "citrix-chihuahua.batta.net", "Citrix-chihuahua", '172.16.27.106' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-chihuahua.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-chihuahua"

New-SelfSignedCertificate -DnsName "citrix-centro.batta.net", "Citrix-Centro", '172.16.27.107' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "citrix-centro.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=Citrix-centro"

New-SelfSignedCertificate -DnsName "CITRIXCORP2.batta.net", "CITRIXCORP2", '172.16.27.114' -KeyUsage "DigitalSignature","KeyEncipherment", "dataEncipherment" -CertStoreLocation "cert:\LocalMachine\My" -FriendlyName "CITRIXCORP2.batta.net" -NotAfter (Get-Date).AddYears(10) -Subject "CN=CITRIXCORP2"

 

Datos adicionales:

CITRIX/ICA; MANUAL DE CREACIÓN DE CERTIFICADOS EN SERVIDOR