{"id":1264,"date":"2024-10-25T20:25:35","date_gmt":"2024-10-25T20:25:35","guid":{"rendered":"https:\/\/www.windlayer.com\/blog\/?p=1264"},"modified":"2024-10-25T20:46:15","modified_gmt":"2024-10-25T20:46:15","slug":"how-to-configure-a-lets-encrypt-tls-certificate-for-windows-remote-desktop","status":"publish","type":"post","link":"https:\/\/www.windlayer.com\/blog\/how-to-configure-a-lets-encrypt-tls-certificate-for-windows-remote-desktop\/","title":{"rendered":"How to Configure a Let&#8217;s Encrypt TLS Certificate for Windows Remote Desktop"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"1264\" class=\"elementor elementor-1264\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-241e4f0 e-flex e-con-boxed e-con e-parent\" data-id=\"241e4f0\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\" data-core-v316-plus=\"true\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ff527f6 e-flex e-con-boxed e-con e-child\" data-id=\"ff527f6\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-37e4b48 elementor-widget elementor-widget-text-editor\" data-id=\"37e4b48\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.19.0 - 07-02-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>One protective layer to take into account while hardening your Windows Server is the TLS security that Windows Remote Desktop Protocol offers.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8fc6f43 elementor-widget elementor-widget-heading\" data-id=\"8fc6f43\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.19.0 - 07-02-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\"> Prerequisite for Configuration of TLS Certificate:<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c55f0f5 elementor-widget elementor-widget-text-editor\" data-id=\"c55f0f5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Make sure your Windows Server instance has a DNS A record added.<\/li><li>The web server is running on Port 80.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5b42afc elementor-widget elementor-widget-heading\" data-id=\"5b42afc\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Configuration of TLS Certificate:<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-16bcbf4 elementor-widget elementor-widget-text-editor\" data-id=\"16bcbf4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol><li>Install Chocolatey. Software package installation, updates, and management can be made easier for Windows users with the help of Chocolatey, a package manager. Developers, system administrators, and power users all choose Chocolatey because it offers a practical and effective approach to manage software packages on Windows machines. To do this follow the steps below.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b3fe7a elementor-widget elementor-widget-text-editor\" data-id=\"6b3fe7a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Open an administrative PowerShell. Click <strong>Start<\/strong>, type <strong>PowerShell<\/strong>, right-click Windows PowerShell, and then click <strong>Run as administrator<\/strong>.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74f5b5d elementor-widget elementor-widget-image\" data-id=\"74f5b5d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.19.0 - 07-02-2024 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"624\" height=\"384\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture1.png\" class=\"attachment-large size-large wp-image-1267\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture1.png 624w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture1-300x185.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d02f0f elementor-widget elementor-widget-text-editor\" data-id=\"0d02f0f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Run the command below:<\/li><\/ul><p><strong><em>set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString(&#8216;https:\/\/chocolatey.org\/install.ps1&#8217;))<\/em><\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ad93c59 elementor-widget elementor-widget-image\" data-id=\"ad93c59\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"624\" height=\"46\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture2.png\" class=\"attachment-large size-large wp-image-1268\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture2.png 624w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture2-300x22.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-53cee1f elementor-widget elementor-widget-text-editor\" data-id=\"53cee1f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>2. Relog in to the server after installing Chocolatey to allow the new environment to take effect.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-afd3f3f elementor-widget elementor-widget-text-editor\" data-id=\"afd3f3f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>3. Use Chocolatey to install Python 3 and OpenSSL<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b249bcd elementor-widget elementor-widget-text-editor\" data-id=\"b249bcd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>choco install openssl python3 -y<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1e6e1fb elementor-widget elementor-widget-image\" data-id=\"1e6e1fb\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"624\" height=\"299\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture3.png\" class=\"attachment-large size-large wp-image-1269\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture3.png 624w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture3-300x144.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-07be3a7 elementor-widget elementor-widget-text-editor\" data-id=\"07be3a7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>4. Use pip to install Certbot.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-725bd30 elementor-widget elementor-widget-text-editor\" data-id=\"725bd30\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>pip install certbot<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a20ee96 elementor-widget elementor-widget-image\" data-id=\"a20ee96\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"325\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture4.png\" class=\"attachment-large size-large wp-image-1270\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture4.png 624w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture4-300x156.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69e1e81 elementor-widget elementor-widget-text-editor\" data-id=\"69e1e81\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>5. Verify that port 80 is open; if not, allow inbound traffic to it.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d14685 elementor-widget elementor-widget-text-editor\" data-id=\"0d14685\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>New-NetFirewallRule -DisplayName &#8220;Let&#8217;s Encrypt (HTTP-In)&#8221; -Direction inbound -LocalPort 80 -Protocol TCP -Action Allow<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-010fd7e elementor-widget elementor-widget-image\" data-id=\"010fd7e\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"212\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture5.png\" class=\"attachment-large size-large wp-image-1274\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture5.png 624w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture5-300x102.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ab13cc elementor-widget elementor-widget-text-editor\" data-id=\"0ab13cc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>6. Obtain a Certificate for Let&#8217;s Encrypt. Assuming we are using domain name <strong>\u201cmydomain.com\u201d. <\/strong>Follow the question prompted as below.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-18337a3 elementor-widget elementor-widget-text-editor\" data-id=\"18337a3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>certbot certonly -d mydomain.com<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76ce51b elementor-widget elementor-widget-image\" data-id=\"76ce51b\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"625\" height=\"306\" src=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture6.png\" class=\"attachment-large size-large wp-image-1275\" alt=\"\" srcset=\"https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture6.png 625w, https:\/\/www.windlayer.com\/blog\/wp-content\/uploads\/2024\/10\/Picture6-300x147.png 300w\" sizes=\"(max-width: 625px) 100vw, 625px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-843c8df elementor-widget elementor-widget-text-editor\" data-id=\"843c8df\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>7. After you obtained certificate from step 6. The keys are save in <strong>C:\\Certbot\\live\\mydomain.com. <\/strong>Windows requires the.pfx format for certificates, but we have created one in the.pem format on the previous step. Use OpenSSL to convert the certificate. Run the command below.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea810ea elementor-widget elementor-widget-text-editor\" data-id=\"ea810ea\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>openssl pkcs12 -export -out C:\\Certbot\\keys\\winrdp.pfx -inkey C:\\Certbot\\live\\mydomain.com\\privkey.pem -in C:\\Certbot\\live\\mydomain.com\\cert.pem -certfile C:\\Certbot\\live\\mydomain.com\\chain.pem -password pass:YOUR_PASSWORD<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48fe71e elementor-widget elementor-widget-text-editor\" data-id=\"48fe71e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>certutil -p YOUR_PASSWORD -importPFX C:\\Certbot\\keys\\winrdp.pfx noExport<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e298c3c elementor-widget elementor-widget-text-editor\" data-id=\"e298c3c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Note: Replace YOUR_PASSWORD with your strong password.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7946c2a elementor-widget elementor-widget-text-editor\" data-id=\"7946c2a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>8. Now apply the certificate to the Remote Desktop. Run the below command.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e34bb8f elementor-widget elementor-widget-text-editor\" data-id=\"e34bb8f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>thumbprint = (Get-ChildItem -Path Cert:\\LocalMachine\\my | WHERE {$_.Subject -match &#8220;mydomain.com&#8221; } | Sort-Object -Descending NotBefore | Select -First 1).Thumbprint<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-976b90c elementor-widget elementor-widget-text-editor\" data-id=\"976b90c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><strong><em>wmic \/namespace:\\\\root\\CIMV2\\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash=&#8221;$thumbprint&#8221;<\/em><\/strong><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ddbb805 elementor-widget elementor-widget-text-editor\" data-id=\"ddbb805\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>9. Finally, use the instance IP address to establish an RDP connection to your instance. A notice about certificate validation need to be sent to you. Next, instead of using the IP address to connect to the instance, use the domain name. There shouldn&#8217;t be any certificate security alerts when you login.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>One protective layer to take into account while hardening your Windows Server is the TLS security that Windows Remote Desktop Protocol offers. \/*! elementor &#8211; v3.19.0 &#8211; 07-02-2024 *\/ .elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]&gt;a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px} Prerequisite for Configuration of TLS Certificate: Make sure your Windows Server instance has a DNS A record added. The [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1267,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[55,52,54,53,8,50,51],"class_list":["post-1264","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorial","tag-certbot","tag-configuration","tag-openssl","tag-powershell","tag-python","tag-tls-certificate","tag-windows-remote-desktop"],"_links":{"self":[{"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/posts\/1264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/comments?post=1264"}],"version-history":[{"count":17,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/posts\/1264\/revisions"}],"predecessor-version":[{"id":1287,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/posts\/1264\/revisions\/1287"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/media\/1267"}],"wp:attachment":[{"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/media?parent=1264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/categories?post=1264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.windlayer.com\/blog\/wp-json\/wp\/v2\/tags?post=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}