Regresar
-
Título
TPAM RDP sessions fail with an error: "ERROR: Remote peer initiated SSL shutdown" and/or produce a gray screen -
Descripción
TPAM fails to connect for RDP sessions.
After trying the troubleshooting steps in the article How to troubleshoot PSM Session connection issues (115880), the session connection still only produces a gray screen and/or returns an error stating:
"ERROR: Remote peer initiated SSL shutdown ERROR: credssp-connection: Failed to receive server response WARNING: Failed to connect with RDPv6, retrying with RDPv5 ERROR: send: Connection reset by peer"
-
Causa
The issue will occur if the Windows Update CredSSP update for CVE-2018-0886 is installed on the target systems.
-
Resolución
WORKAROUND
On the target PSM system set the "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters\AllowEncryptionOracle" key to "1" (Mitigated) instead of "0" (Force updated clients), which should allow PSM to work from TPAM.For more information please review this Microsoft article. Microsoft article CredSSP updates for CVE-2018-0886.One Identity does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry”: http://support.microsoft.com/default.aspx?kbid=256986 -
Solicitud de cambio
10377