PCI compliance: using SSL as transport layer for RDP (Terminal Service)
Posted
by Crashalot
on Super User
See other posts from Super User
or by Crashalot
Published on 2010-04-12T21:50:22Z
Indexed on
2010/04/12
21:53 UTC
Read the original article
Hit count: 405
My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.
The supposed solution is to force SSL as the transport layer for RDP.
Anyone know how to do this?
The server runs Windows 2003.
© Super User or respective owner