RemoteApp 1C domain and user certificates, how to make friends with all this?

Question

Active Directory

We have a domain with a raised certification service, users have been issued a certificate that is used to sign internal documents in 1C. Everything works, but there was a problem, users who use 1C via RemoteApp cannot sign the document until their certificate is imported on the RemoteApp server. It turns out that you must first export the certificate from their machine (and if it is marked as not exportable, then it’s a dead end) and then log in to the RemoteApp server under their account and import the certificate, which is very inconvenient, since a decent number of such users are planned
... how to distribute the certificate to the 1C server without using certutiland the like? Or how can I force 1C launched via RemoteApp to see the certificate installed on the user's machine?
All machines and servers in the domain.

Answer 1

As an option - publish a certificate (or certificates) in AD, it is very well described here .