PCI compliance: using SSL as transport layer for RDP (Terminal Service)

Posted by Crashalot on Server Fault See other posts from Server Fault or by Crashalot
Published on 2010-04-12T21:50:22Z Indexed on 2010/04/12 23:23 UTC
Read the original article Hit count: 374

My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.

The supposed solution is to force SSL as the transport layer for RDP.

Anyone know how to do this?

The server runs Windows 2003.

© Server Fault or respective owner

PCI compliance: using SSL as transport layer for RDP (Terminal Service)

Posted by Crashalot on Super User See other posts from Super User or by Crashalot
Published on 2010-04-12T21:50:22Z Indexed on 2010/04/12 21:53 UTC
Read the original article Hit count: 373

My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.

The supposed solution is to force SSL as the transport layer for RDP.

Anyone know how to do this?

The server runs Windows 2003.

© Super User or respective owner

PCI compliance: using SSL as transport layer for RDP (Terminal Service)

Posted by Crashalot on Stack Overflow See other posts from Stack Overflow or by Crashalot
Published on 2010-04-12T19:36:07Z Indexed on 2010/04/12 20:03 UTC
Read the original article Hit count: 373

My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.

The supposed solution is to force SSL as the transport layer for RDP.

Anyone know how to do this?

The server runs Windows 2003.

© Stack Overflow or respective owner

Related posts about Windows

Related posts about ssl