Return
-
Title
Error: "A revocation check could not be performed for the certificate" -
Description
Despite certificate with CRL (Certificate Revocation List) points being added, when connecting to a RDP session the error "A revocation check could not be performed for the certificate"
-
Cause
When an RDP connection is made, Windows attempts to verify that the certificate provided has not been revoked. This is achieved by checking a Certificate Revocation List (CRL) published in a URL of the certificate owner's choice called the CRL Distribution Point (CRL DP). -
Resolution
WORKAROUND
Click "Do you want to connect despite these certificate errors", to continue the PSM connection
RESOLUTION
For SPS that is joined to SPP- In SPS set the certificate:
https://sps_ip | Policies | Signing CAs | Edit safeguard_defaultUpload the signing certificate, private key, and set a CRL distribution point.More information about the Signing CA certificates are available in the SPS guide:https://support.oneidentity.com/one-identity-safeguard-for-privileged-sessions/technical-documents -
Change Request
TFS 763103