There are upcoming maintenance events which may impact our services. Learn more

How to resolve RDP authentication error due to the CredSSP encryption oracle remediation on Windows OS Print

  • RDP, CredSSP encryption, oracle remediation on Windows OS, resolve RDP authentication
  • 0

How to resolve RDP authentication error due to the CredSSP encryption oracle remediation on Windows OS

To resolve the Remote Desktop Protocol (RDP) authentication error related to the CredSSP encryption oracle remediation on Windows OS, you can follow these steps:

  1. Update your Windows OS: Ensure that both the local and remote computers have the latest Windows updates installed. Microsoft often releases security patches and updates to address known issues, including CredSSP-related vulnerabilities.
  2. Registry modification (for client-side):
  • Press Win + R on your keyboard to open the Run dialog box.
  • Type regedit and press Enter to open the Registry Editor.
  • Navigate to the following registry key:
sql
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters
  • If the Parameters key does not exist, you may need to create it.
  • Inside the Parameters key, create a new DWORD value named AllowEncryptionOracle.
  • Set the value of AllowEncryptionOracle to 2 (hexadecimal).

Group Policy modification (for server-side):

  • Press Win + R on your keyboard to open the Run dialog box.
  • Type gpedit.msc and press Enter to open the Local Group Policy Editor.
  • Navigate to the following policy:
rust
Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Encryption Oracle Remediation
  • Double-click on "Encryption Oracle Remediation" to open the policy settings.
  • Select the "Enabled" option.
  • Under "Options," choose "Vulnerable" or "Mitigated" based on your security requirements. Selecting "Vulnerable" allows insecure clients to connect, while "Mitigated" only allows secure connections.
  • Click OK to save the changes.

Restart your computer: After making the necessary changes in the Registry Editor or Group Policy Editor, restart your computer to apply the modifications.


Was this answer helpful?

« Back

["\r\n