Docs / Certificates / Overview
RDS Certificates Overview
The Certificates page lists every SSL/TLS certificate issued for Windows Remote Desktop Services servers, showing issuance state, expiry countdown, and whether the PowerShell agent is actively monitoring each certificate.
What each column shows
- →Domain — the fully qualified domain name the certificate is issued for, linked to its detail page.
- →Client — which client this certificate belongs to. Every certificate must be assigned to a client.
- →Status — current lifecycle state of the certificate (see status badges below).
- →Expires — the certificate expiry date. A warning badge appears as the expiry approaches.
- →Agent — whether the PowerShell auto-deploy agent has checked in recently. Shows the last-seen timestamp when active.
Status badges explained
- →Pending — the certificate request has been received and the ACME order is being prepared.
- →Issuing — the DNS-01 challenge is in progress. Albaspot has added the required TXT record to DNSimple and is waiting for ACME validation.
- →Active — the certificate is valid and deployed. The expiry countdown is shown in the Expires column.
- →Renewing — auto-renewal has been triggered (14 days before expiry). A new certificate is being issued to replace the current one.
- →Failed — issuance or renewal encountered an error. Open the certificate detail page to view the reason and retry.
Expiry countdown
Let's Encrypt certificates are valid for 90 days. Albaspot displays a countdown in the Expires column and highlights certificates nearing expiry. Email notifications are sent at 30, 14, and 7 days before expiry. Auto-renewal starts at 14 days, so under normal circumstances a certificate will renew before any warning is reached.