Troubleshooting Remote Desktop and CredSSP encryption issues

We have identified an issue when attempting to access our servers via RDP (Remote Desktop). However, the issue is beyond our control, as it is caused by a Windows update. The issue may originate on either the server or the client, and the error or errors displayed when you try to connect to your Clouding.io server via RDP are as follows:

 The issue is caused by this update and this security issue, which has already been fixed and is why the error is displayed.

Resolving the issue: Server

To resolve this issue from the server, you need to access the server. Since RDP is currently unavailable, we will need to access our server through the Consola de Emergencia:

A window will open with the Windows login screen, and we will need to click the blue bar to start typing. If you encounter problems at this point, please refer to this article for more details: Configuring the keyboard in the Clouding VNC Console.

Once logged in, we will need to press Windows key + r to open the Ejecutar window. Alternatively, we can go to Inicio and search for ejecutar or run (if your Windows is in English).

 Enter the following there:

gpedit.msc

Click Aceptar and a window like the following will open:

 In this window, we need to go to Directiva Equipo Local > Configuración del equipo > Plantillas Administrativas > Sistema > Delegación de credenciales. We will edit the local group policy called Corrección del oráculo de cifrado.

 To edit the policy, right-click > Editar. We need to edit the policy so that it is configured as follows:

• Habilitada
• Nivel de protección: Mitigado

That should be sufficient. All that remains is to restart the server. After restarting, you will be able to log in without any problems via RDP.

Resolving the issue: Client

To resolve this issue from the client, which is the computer we use to connect to the server, we need to launch the Editor de Directivas Locales as follows.

We will need to press Windows key + r to open the Ejecutar window. Alternatively, we can go to Inicio and search for ejecutar or run (if your Windows is in English).

Enter the following there:

# gpedit.msc

Click Aceptar and a window like the following will open:

In this window, we need to go to Directiva Equipo Local > Configuración del equipo > Plantillas Administrativas > Sistema > Delegación de credenciales. We will edit the local group policy called Corrección del oráculo de cifrado.

To edit the policy, right-click > Editar. We need to edit the policy so that it is configured as follows:

• Habilitada
• Nivel de protección: Vulnerable

That should be sufficient. All that remains is to restart the computer. After restarting, you will be able to log in without any problems via RDP.