Regresar
-
Título
Error: "A revocation check could not be performed for the certificate" -
Descripción
Despite certificate with CRL (Certificate Revocation List) points being added, when connecting to a RDP PSM session the error "A revocation check could not be performed for the certificate"
-
Causa
When an RDP connection is made, Windows attempts to verify that the certificate provided has not been revoked. This is achieved by checking a Certificate Revocation List (CRL) published in a URL of the certificate owner's choice called the CRL Distribution Point (CRL DP). Tthere is no way to provide a CRL point to a Safeguard on-the-fly generated certificate when using the embedded session module. -
Resolución
WORKAROUND
Click "Do you want to connect despite these certificate errors", to continue the PSM connection
RESOLUTION
Use external Safeguard for Privileged Session and join to Safeguard for Privileged Passwords. The ability to join is available from Safeguard 2.7 and above. SPS is available hereIn SPS set the certificate:
https://sps_ip | Policies | Signing CAs | Edit safeguard_defaultUpload the signing certificate, private key, and set a CRL distribution point.More information about the join and Signing CA certificates are available in the SPS guide: -
Solicitud de cambio
TFS 763103