CredSSP encryption oracle remediation error in Windows Remote Desktop

Issue description: When attempting to connect to a Windows instance using Remote Desktop, "An authentication error has occurred. The requested function is not supported." error message appears

 

 

 

Root cause:

The issue is caused by a security update released by Microsoft in May 2018 that affects the Credential Security Support Provider protocol (CredSSP) and authentication request methods.

By default, after installing this update, patched local computers are unable to communicate with unpatched instances.

 

Solution:

Depending on the specific scenario, you can consider the following three solutions:

 

Solution 1 : Run the following command on the local PC

 

1.Open a CMD window with administrator privileges on the local PC. Run the following command:

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" /v AllowEncryptionOracle /t REG_DWORD /d 2 /f

 

Solution 2: Allow Remote Desktop Connections on the instance

 

1.Use VNC to connect to the Windows system,Click on the Start menu and right-click on "This PC" (or "My Computer") and select "Properties".

 

 

  1. 2.On the Control Panel main page, click on "Remote Settings".

 

 

  1. 3.Under the "Remote" tab, uncheck the option "Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended)", and then click on "OK".

 

 

Solution Three: Modifying the Registry

 

1.Connect to the Windows system using VNC.

2. Click on the "Windows PowerShell" in the lower-right corner to open it, and execute the following command to run the Windows PowerShell script as an administrator:

  • New-Item -Path HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System -Name CredSSP -Force 
  • New-Item -Path HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP -Name Parameters -Force 
  • Get-Item -Path HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters | New-ItemProperty -Name AllowEncryptionOracle -Value 2 -PropertyType DWORD -Force 

 

3.The changes will take effect after rebooting the machine.

  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

How to create a partition in Windows system

1.Right-click on the Start menu in the Windows Server desktop and select "Disk Management."...

Change the remote port number in Windows

The remote port number for Windows systems is between 1024 and 65535, and you can choose any...

Change Administrator Password in Windows

There are two ways to manually change the Windows Administrator password: 一.Changing the...

To disable automatic system updates on Windows

  1.Remotely access the Windows instance using Remote Desktop. 2. Click on the Start...