Windows 2003 - Importing a certificate for terminal services

I am running Windows Server 2003 on a number of servers and I want to setup terminal services to run over SSL. I can use Selfssl.exe to generate a certificate and automatically install it, but I can't seem to figure out how to use this certificate on another server for terminal services.

If I export the certificate with the private key, I can copy it to another server and import it via IIS for a website, but I don't see similar functionality in terminal services configuration. The only certificates I can see when I attempt to add one are those that I generate on that server and I can't figure out for the life of me how to install another one manually.

Any help is appreciated,
-The Bryophyte

If you have multiple server, I would suggest setting up a CA.

Open MMC.exe. Add the certificates snap in. Select the local computer account. Then import the certificate to the personal store. You then select the cert from Terminal Services Configuration in the administrative tools.

Thanks for the help so far. I setup a CA and did as you suggested. I successfully installed the cert, but when I try to connect to the server via terminal services, I get the message "the certificate or associated chain is invalid" code 0x10000. I can't find any useful reference to the error so far.

Any suggestions on where I went wrong?

This isn't my area of expertise at all, but I figured I would toss out the obvious as it's sometimes overlooked --

Does your client trust your CA? I know that, in order to accept a certificate (be it permanent or temporary), you have to trust the CA.

I checked to confirm and also re-installed the certificate. The client definitely trusts the CA. Definitely worth checking though.

That guide is for Server 2008 and I have already completed all of those steps.