- Windows 10: When using Remote Desktop to connect to another computer, the following error occurs: “Because of an error in data encryption, this session will end. Please try connecting to the remote computer again.”
- This could be due to CredSSP encryption oracle remediation.
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing
Solution 1:
Type gpedit.msc in Run to open the Local Group Policy Editor.
Go to Group Policy > Computer Configuration > Windows Settings > Security Settings > Security Options > System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.
As shown below, enable it first and then disable it.
Solution 2:
After a Windows 10 update, Remote Desktop can no longer connect to Windows Server 2012–2018 or the latest server operating systems.
As shown below:
See Microsoft’s update notes:
https://support.microsoft.com/zh-cn/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018
This update changes the default setting of the CredSSP authentication protocol to “Mitigated”; it was previously “Vulnerable”.
Type gpedit.msc in Run to open the Local Group Policy Editor.
Go to Group Policy > Computer Configuration > Administrative Templates > System > Credentials Delegation > Encryption Oracle Remediation.
Change the setting to “Vulnerable”.
If you are using the Home edition, you will need to modify the registry to apply this correction.
Open Run and type regedit.
Locate the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters
Typically, no further entries exist beyond the System key. Right-click System and select New > Key:
Name it CredSSP. Then right-click CredSSP and create a new key named Parameters:
Next, right-click Parameters, select New > DWORD (32-bit) Value, and name it AllowEncryptionOracle:
Double-click the AllowEncryptionOracle value you just created:
Set Value data to 2.
After making these two changes, Remote Desktop connections should work again. Applications such as Ruiyou Tianyi and Jinwanwei Yisulian should also be usable.
