diff --git a/conf/default/web.conf.default b/conf/default/web.conf.default
index 5d9538a18e4..9f1ce89aec6 100644
--- a/conf/default/web.conf.default
+++ b/conf/default/web.conf.default
@@ -194,6 +194,7 @@ guest_width = 1280
 guest_height = 1024
 # rdp settings
 guest_rdp_port = 3389
+ignore_rdp_cert = false
 
 [packages]
 # VM tags may be used to specify on which guest machines a sample should be run
diff --git a/web/guac/consumers.py b/web/guac/consumers.py
index 89b0bcd600c..fb966d16727 100644
--- a/web/guac/consumers.py
+++ b/web/guac/consumers.py
@@ -32,12 +32,15 @@ async def connect(self):
         params = urllib.parse.parse_qs(self.scope["query_string"].decode())
 
         if "rdp" in guest_protocol:
-            guest_host = params.get("guest_ip", "")
+            hosts = params.get("guest_ip", "")
+            guest_host = hosts[0]
             guest_port = int(web_cfg.guacamole.guest_rdp_port) or 3389
+            ignore_cert = "true" if web_cfg.guacamole.ignore_rdp_cert is True else "false"
         else:
             guest_host = web_cfg.guacamole.vnc_host or "localhost"
             ports = params.get("vncport", ["5900"])
             guest_port = int(ports[0])
+            ignore_cert = "false"
 
         guacd_recording_name = params.get("recording_name", ["task-recording"])[0]
 
@@ -53,6 +56,7 @@ async def connect(self):
             password=guest_password,
             recording_path=guacd_recording_path,
             recording_name=guacd_recording_name,
+            ignore_cert=ignore_cert,
         )
 
         if self.client.connected: