I'd like to sign connections to my RD Gateway with a trusted certificate, and for that I need to generate an appropriate certificate request. However I try and do this, though, I'm getting the error "provider type not defined". I have tried this on both Server 2008 R2 and Server 2012 (both 64-bit) and the behaviour is the same.
Through the UI - Add the Certificates snap-in to MMC, and choose local machine. Choose the Personal Store > All Tasks > Advanced Operations > Create Custom Request. Choose "Proceed without enrollment policy", CNG key with PKCS #10 format. Go to details and click "Properties". Click on the "Private Key" tab. A boxed titled "Error" pops up, with the message "Provider type not defined." All of the UI options on that tab that should be drop-down boxes don't work, so I can't choose them and can't generate an appropriate request.
Through the command line - Using certreq -new with an inf file that successfully generates a request on other machines. When run on my RD gateway server it fails to complete, giving the error "Provider type not defined".
Both of these methods work fine on other servers/workstations and generate working request files. Can anyone give me any pointers as to what it is about an RD gateway server (both Server 2008R2 and Server 2012) that causes these request to fail?
Thanks in advance