Add possibility to deposit signature for signed RDP connections

[andy1463]

If you open a RDP connection in MSTSC mode you get the message "the publisher of this remote connection can't be identified"

This message will not appear if you sign the RDP file as trusted publisher.
An option for adding either the signature of a signed RDP file to the config or possibility to import signed RDP files would be great.

[VShawn]

i have no idea how to get a signed rdp file and I am not sure if 1Remote can signed a rdp file since, do you have any suggestion?

[VShawn]

sounds easy to achieve.

but according to https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/rdpsign

We need a hash to finsh the sign, where we can get it? And if it requires the user to manually install a certificate and then specify the hash of the certificate in 1Remote, the user experience would be poor. I would prefer to have the user check the "do not ask me again" option.

[andy1463]

Enterprise environments often have PKI installed and certificates will be rolled out via group policies. So it won't be necessary to install a certificate manually.
Maybe it is an idea to add an additional field for hash value and sign the connection if mstsc mode is checked?
If you have a lot of rdp connections you can sign them with the same certificate, so you only need the hash value one time. Should be easy for admins to read the hash value from the certificate.

[VShawn]

simply adding the option is easy, but the concern is how many people will be able to extract the hash on their own. it would be helpful to provide a hint on how to obtain the hash, and there should also be instructions for certificate installation for those non-enterprise users. However with all this above, things becomes more complex and requires more time to complete.

[VShawn]

And I'm also doubting how many users would benefit from this option. Personally, I have never been aware of this signature option before, and it has never caused any inconvenience. Lastly, for the sake of user experience, I would prefer not to add too many complex options in the configuration menu that the average person may not understand. There are already plenty of settings options available.

[andy1463]

I understand your argumentation.
Maybe an idea for future versions. Add something like "expert mode" which is shielded by default and if you activate it you can add more specific options.