Replace Remote Desktop Broker certificate, webclient

Certificates are fun.... right?

No.... but they do a great job when correctly in place.

Had a problem with the RD WebClient after changing the broker certificate, this:

 

Oops, we couldn't connect to "Chrome"
Your session ended because an unexpected server authentication certificate was received from the remote PC. Ask your admin or tech support for help.

I first replaced the certificate via the Remote Desktop Connection Broker GUI. Everything fine so far, I could connect via the normal RemoteApp way. However, I was starting getting reports that the HTML5-client presented a cert error (see above).

What is also needed to do is to tell the web client what certificate on the broker to expect. Log in to the server containing the webclient (in my case, the RDWEB-server):

Load the RDWebClientManagement-module i PS elevated mode:

"Import-Module -Name RDWebClientManagement"

Check what certificate the WebClient expects now:

"Get-RDWebClientBrokerCert"

If this is the wrong one, transfer a .crt or .cer of the certificate on the broker an import it to the WebClient:

"Import-RDWebClientBrokerCert C:\certs\2019-10\certificate.crt"

Check again:

"Get-RDWebClientBrokerCert"

If correct, you should not see the certificate error anymore.