-
タイトル
Error: "An authentication error has occurred. The function requested is not supported" -
説明
When using Network Level Authentication (NLA) within Microsoft Windows in conjunction with Remote Desktop Connections, Microsoft Windows will deny the connection with the following error:
"An authentication error has occurred.
The function requested is not supported
Remote computer: 0.0.0.0
This could be due to CredSSP encryption oracle remediation.
For more information, see https://go.microsoft.com/fwlink/?linkid=866660" -
原因
Microsoft has implemented security changes to stop "man-in-the-middle" attacks and indirectly blocks One Identity's Safeguard for Privileged Sessions from implementing Remote Desktop Connection monitoring. -
対策
All Microsoft Windows devices involved with the connection must be updated to be CredSSP compliant in order for the connection to be made correctly.
For example:
A Microsoft Windows 10 desktop machine using Remote Desktop Connection to connect to a Microsoft Windows Server 2016 machine. In this case both the Microsoft Windows 10 desktop machine and the Microsoft Windows Server 2016 machine must be patched for One Identity's Safeguard for Privileged Sessions to work correctly.
Microsoft has supplied the list of updates required to be CredSSP compliant and the link to that information can be found here:
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0886
In addition, information pertaining the to CredSSP updates can be found via Microsoft's support portal which has been linked here:
https://support.microsoft.com/en-in/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018
Once all machines have been patched, the Remote Desktop Connection using One Identity's Safeguard for Privileged Sessions should work as expected using NLA.On a Windows 7 SP1 desktop machine, an update to the RDP client to version 8.x allows the connection to be made correctly.
https://support.microsoft.com/en-sg/help/2923545/update-for-rdp-8-1-is-available-for-windows-7-sp1