After SPS 8.2 upgrade RDP errors with certificate verification failed (4383365)

After SPS 8.2 upgrade, the logs showing that RDP errors with a certificate verification failed:

[Timestamp] SPS-Hostname zorp/scb_rdp[1721]: core.policy(1): (svc/pTBrAs71F86496shS4s2nu/safeguard_rdp:01/rdp): Certificate verification failed; error='self-signed certificate', issuer='/CN=SERVER01.domain.com', subject='/CN=SERVER01.domain.com'

The error happens when target servers use a Self-Signed RDP certificate and the RDP connection policy has the TLS setting for Server certificate validation set to Only accept certificates authenticated by the trusted CA list.

RESOLUTION:

• Update the target server RDP certificate so that it is issued by a trusted CA instead of using a self-signed certificate.
• Make sure that the Issuer CA certificate is added in SPS under Policies > Trusted CA Lists
• In the RDP Connection Policy > Transport security settings > TLS
  • Select the option to Only accept certificates authenticated by the trusted CA list
  • Select the Trusted CA which contains the CA certificate.
    
    

WORKAROUND:

• SPS admin can disable the Server certificate validation by setting it to No Validation