Windows, Windows knowhow

Windows: Remote Desktop Client returns “internal error”

Hi,

if the remote desktop client return an “internal error” window check if the tls/ssl connection to the RDP port is working correctly:

For example from a linux machine or from a wsl(windows subsystem for linux) session:

1
2
3
4
5
6
7
8
9
10
michael@debdev : ~ # openssl s_client -host myRDPHost  -port 3389
CONNECTED(000001A4)
write:errno=32
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---

If there is no certificate shown. Check system eventlog for errors with ID 36870

1
2
A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001.
 The SSPI client process is svchost[TermService] (PID: 1412).

If that error occures. On domain joined machines open machine certificate store and delete the private key. Then trigger the generation of a new machine certifcate

1
2
PS D:\> gpupdate /force
PS D:\> certutil -pulse

Michael