PCI compliance: using SSL as transport layer for RDP (Terminal Service)
Posted
by Crashalot
on Server Fault
See other posts from Server Fault
or by Crashalot
Published on 2010-04-12T21:50:22Z
Indexed on
2010/04/12
23:23 UTC
Read the original article
Hit count: 415
My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.
The supposed solution is to force SSL as the transport layer for RDP.
Anyone know how to do this?
The server runs Windows 2003.
© Server Fault or respective owner