We had a customer report an issue with a hosted server last night.\u00a0 They were trying to RDP in to a hosted Windows Server 2008 machine from Vista PC\u2019s and we\u2019re not able to.\u00a0 XP clients were fine.\u00a0 Here\u2019s the error they got:<\/p>\n
\u201cRemote Desktop cannot connect to the remote computer because the authentication certificate received from the remote computer is expired or invalid\u201d.<\/p>\n
Windows is trying to make RDP secure, doing all sorts of mutual authentication things with x.509 certificates.\u00a0 The solutions I first saw were to renew a certificate from the PKI.\u00a0 Huh?\u00a0 This is a workgroup machine in an isolated\/firewalled network.\u00a0 No go there sunshine!<\/p>\n
The solution was to fire up the Certificates snap-in in MMC on the server for the local computer, browse to Remote Desktop and delete the certificate.\u00a0 This was because the cert was expired.<\/p>\n
Alternatively you can change the security of RDP from \u201cSSL (TLS 1.0)\u201d or \u201cNegotiate\u201d to \u201cRDP Security Layer\u201d to instruct RDP to abandon the certificate.\u00a0 This is done in the properties of RDP in the Terminal Services Configuration MMC.<\/p>\n
If the cert wasn\u2019t expire then you should check that the time was correct on both the client and the server.<\/p>\n","protected":false},"excerpt":{"rendered":"
We had a customer report an issue with a hosted server last night.\u00a0 They were trying to RDP in to a hosted Windows Server 2008 machine from Vista PC\u2019s and we\u2019re not able to.\u00a0 XP clients were fine.\u00a0 Here\u2019s the error they got: \u201cRemote Desktop cannot connect to the remote computer because the authentication certificate … Continue reading “RDP Certificate Expired”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[52],"tags":[],"class_list":["post-9840","post","type-post","status-publish","format-standard","hentry","category-windows-server"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t