CredSSP Encryption Oracle Remediation Error – Remote Desktop Connection


Word of Caution: This article contains a procedure to edit/change Windows Registry. Please take necessary precaution before attempting this.

I received an error this morning while trying to connect to one my clients’ server. The message as follows:

Screen Shot 2018-05-10 at 09.45.07.png

With the help of one of my contacts at the client site, also upon searching and following the link provided in the message itself, couple of help pages stood out:

  1. CredSSP updates for CVE-2018-0886
  2. CredSSP encryption oracle remediation

For those who would like to see the solution immediately without having to go through the details from above links, I shall brief the solution itself here.

There are basically two solutions:

  1. Run “Windows Update” on the remote server (or the workstation) to which you are trying to connect. This will ensure that you have the latest patch on the remote box and you wouldn’t be facing this issue again. This would work provided your machine also has got the latest updates applied.
  2. For those who cannot update the remote box for some reason(s), you would have to create a new registry entry as shown below:

Screen Shot 2018-05-10 at 14.24.19.png

Once above registry key is created, you must restart your workstation / client / computer without fail.

All good now to successfully connect to the remote box again.

A note of thanks to Dave.

Vaidy